Skip to main content

IANA 职能和 DNSSEC 审计:ICANN 各类系统拥有适当控制措施

互联网名称与数字地址分配机构 (ICANN) 现已完成对 IANA 注册管理系统和 DNSSEC 服务的第三方年度审计工作。

ICANN 已经连续六年通过了针对域名系统安全扩展 (DNSSEC) 根区密钥签名密钥系统而进行的服务性机构控制体系 (SOC) 3 号认证。本认证证实了用以调整根区密钥签名密钥的流程(即 DNS 的信任锚)囊括了适当的安全措施,并已按照计划顺利执行。如需查看本认证请参见以下链接:

此外,ICANN 还连续三年成功通过了针对 IANA 注册管理系统进行的 SOC 2 号认证审计,证实了本组织拥有确保系统安全、可靠和流程完整性的适当控制措施。ICANN 自 2013 年起即在接受 SOC 2 号审计。



ICANN 的使命在于确保全球互联网的稳定、安全与统一。在互联网上寻找另一个人的信息,您必须在您的电脑中键入一个地址——可以是一个名称或是一串数字。这一地址必须是独一无二的,只有这样电脑之间才能互相识别。ICANN 则负责协调这些分布在全球各地的唯一标识符。ICANN 是成立于 1998 年的一家非营利性公益型企业,其社群中的参与人遍布世界各地。ICANN 及其社群帮助维持互联网的安全、稳定和互用性。该组织还负责制定互联网顶级域系统的政策,提高该系统的竞争水平,并促进其他互联网唯一标识符的使用。如需了解更多信息,请参见

More Announcements
Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as"""" is not an IDN."