Skip to main content

ICANN 组织启动涉及 DNS 安全威胁义务的注册服务机构合规审计


洛杉矶——2021 年 1 月 15 日——互联网名称与数字地址分配机构 (Internet Corporation for Assigned Names and Numbers, ICANN) 于今天宣布启动一轮注册服务机构审计,审查它们如何在处理潜在滥用域名报告时履行合同义务。2019 年的审计工作囊括了所有现有的注册管理运行机构,旨在了解注册管理机构在执行安全威胁报告时如何履行合同义务的情况。而本轮审计工作则在上述审计完成后启动。

2021 年 1 月 11 日,ICANN 合同合规部已向需要参与审计的已选注册服务机构发送了审计事前通知。所选注册服务机构将在 2021 年 1 月 25 日收到一份囊括审计问题的《信息征询 (Request for Information, RFI)》。这轮审计囊括的注册服务机构是:

  1. 至少拥有五个 (5) 域名上了 2020 年 11 月的“公共信誉黑名单 (public reputation blocklist, RBL)”。RBL 识别的这些域名可能被用于网络钓鱼、恶意软件和/或命令和控制僵尸网络滥用,和/或
  2. 拥有的域名被纳入了 2019 注册管理运行机构合规审计项目中收取的安全威胁报告。

在 2,380 多家 ICANN 认证注册服务机构之中,我们发现仅有 153 家机构有 5 个以上可能被滥用的域名被纳入到了 2020 年 11 月审核的 RBL 之中。这轮 RFI 将请求注册服务机构提供关于它们应对可能遭滥用的域名的措施的任何相关文件。

ICANN 合同合规部预计将在 2021 年第三季度结束前完成这轮审核。


ICANN 的使命在于确保全球互联网的稳定、安全与统一。在互联网上寻找另一个人的信息,您必须在您的电脑或其他设备中键入一个地址——可以是一个名称或是一串数字。这一地址必须是独一无二的,只有这样电脑之间才能互相识别。ICANN 则负责协调并支持这些分布在全球各地的唯一标识符。ICANN 成立于 1998 年,是一家非营利公益型企业,其社群成员遍布全球各地。

More Announcements
Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as"""" is not an IDN."