Monday 23 December: 10 am -2 pm
Tuesday 24 December: closed
Wednesday 25 Desember: closed
Thursday 26 December: closed
Friday 27 December: 10 am - 2 pm
Monday 30 December: 10 am -2 pm
Tuesday 31. December: closed
Wednesday 1 January: closed

The zone file will be produced at the normal times through the holidays.

We wish you all a Merry Christmas and a Happy New Year.

Starting December 17th 2024 at 09:00 CET (UTC+1), EPP and our other web services will present TLS certificates signed by Let's Encrypt. This means that EPP clients - which do not already trust Let's Encrypt as a certificate authority - will need to be reconfigured.

In various systems (operating systems, browsers, etc.), the collection of root certificates of trusted certificate authorities is stored centrally (often referred to as a 'truststore'). Let's Encrypt is already established [1] in most of these, so in most cases the change will not require any action.

We will not be announcing future renewals of the EPP service's TLS certificates. Exceptions will be if we, for example, change certificate authorities, or to the underlying protocols. Further details are provided on our website [2].

The change is being rolled out in two parts:

• Test systems
  • Test systems for domain registrars will have the change implemented on December 10, 2024
• Production systems
  • Production systems (the registration service, and other web services) will have the change implemented on December 17, 2024, at 09:00 CET (UTC+1).

References:

1. https://letsencrypt.org/docs/certificate-compatibility/
2. https://teknisk.norid.no/en/integrere-mot-norid/epp/epp-sertifikater/

We also see that the registry system can handle more load than what the limits in the acceptable use policy opens up for.  

Based on this we have increased the limits for point 3, 4 and 5 in the policy. These points include the EPP commands CHECK, INFO and POLL.

At the same time we open up to exercise discretion when assessing if a registrar complies with the limits, based on the size of the registrar’s domain portefolio. The principle of no automatic sanctions for exceeding these limits is continued. 

The limits for DAS, WHOIS and CREATE are not changed.

This is a notification that the limits in the acceptable use policy have been changed, in accordance with the requirements in the registrar agreement point 2.2.

Norid does not send these kind of emails with payment links, and Norid does not bill subscribers directly. Do not click on the link.

Everyone providing internet-based services must assess whether their service falls under the DSA. This includes you as registrars.

Norid has created an article where you can learn about the types of services regulated by the DSA, helping you better assess whether your services are covered by the regulations. You will also find out why we at Norid have concluded that we are not covered by the DSA.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

When: Thursday 7 November 2024, 9 am - 4 pm
Where: National Museum in Oslo. It is also possible to join digitally.

Note that most of the presentations will be in Norwegian.

Read more about the agenda and sign up here

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

As expected, most of the applications were for da.no and ans.no, but we also received some applications for the other domain names in the lottery.

We received a total of 471 applications and after deleting duplicates we were left with 456 applications in the lottery. These applications were distributed as follows:

• 228 applications for da.no
• 157 applications for ans.no
• 71 applications under under the geograpical domains and category domains administered by Norid

We received applications from 144 private individuals and 312 organizations.

We received some applications with errors, but these were mostly fixed and new applications submitted before the deadline.

The lottery resulted in 14 registered domain subscriptions, and a total of 20 registrars participated by submitting applications.

The domain lookup gives information about .no domain name subscribers.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

This is in order to prepare for the reception of applications and the implementation of the lottery for registration of the domain names ans.no, da.no and the domain names «ans» and «da» under the geograpical domains and category domains administered by Norid.

Due the the lottery the EPP-service and the EPP client will be closed for several short periods of time.

Read more about the time schedule for the lottery

From 10 June at 10 am CET it is possible to submit applications for the domain names ans.no, da.no and the domain names «ans» and «da» under the geograpical domains and category domains administered by Norid. It is possible to apply for about 1600 domain names of the type da.trondheim.no, ans.oslo.no and da.priv.no.

You can read more about the background for why Norid is changing the domain name policy and open up for these domain names in the news article published on norid.no.

Reception of applications for the lottery

Everyone shall have equal opportunities when we start the allocation. We therefore start by accepting applications which are entered into a lottery. The lottery is a fair method for handling situations where many applicants want the same domain name.

Due to the lottery the reception of applications (EPP-service) will be closed for short periods of time in order to prepare for the reception of applications and the implementation of the lottery.

Monday 10 June

09.30 am CET: The EPP-service as well as eppclient.norid.no (EPP-client) are closed for all processing of applications.

10 am CET: The EPP-service and the EPP-client opens for applications for the domain names «ans» and «da» directly under .no and under the geograpical domains and category domains administered by Norid. These applications (lots) are checked for formal errors and then stored in a separate queue.

All other applications are processed as normal.

Tuesday 11 June

4 pm CET: The EPP-service and the EPP-client are closed for the reception of lots and all other processing of applications. If a private individual or organisation have submitted several applications for the same domain name, all but one application are removed.

4.30 pm CET: The EPP-service and the EPP-client are opened for normal processing of applications. It is no longer possible to apply for the domain names «ans» and «da».

Wednesday 12 June

The Norwegian Communications Authority (Nkom) will conduct a lottery in order to decide the order for processing applications for the same domain name.

11.30 am CET: The EPP-service and the EPP-client are closed for all processing of applications.

Norid will process the applications (lots) in the order they are drawn.

The result of these applications will be communicated via the EPP message queue.

12 noon CET: The EPP-service and the EPP-client are opened for normal processing of applications according to the new domain name policy. All new applications for «ans» and «da» domain names are processed as normal.

Important to remember

All applications which are submitted during the transition period must fulfill all allocation rules. Among other things the applicant declaration must be signed, the subscriber must qualify to register a domain name under .no and have room in their quota. Most of the category domain names administered by Norid have additional requirements that the subscriber must fulfill. These also apply for «ans» and «da» domain names.

The following certificates will be renewed:

• epp.norid.no
• eppclient.norid.no
• registrar.norid.no

This will not affect the availability of these services.

Monday 25 March: Normal opening hours
Tuesday 26 March: Normal opening hours
Wednesday 27 March: 9 am - 12 noon (Phone: 10 am - 12 noon)
Thursday 28 March - Monday 1 April: Closed

The zone file will be published as usual during Easter.

We wish you all a Happy Easter.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

All of the affected municipalities are listed in the Domain name policy for .no, appendix B. In addition to this list, oslo.no will also be affected.

The change has no practical consequence for those administrating domain names for Norwegian municipalities.

What is DMARC and SPF?

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a protocoll which gives the subscriber of a domain name the possibility to protect the domain name against unauthorised use of unknown email servers. DMARC is described in the technical document RFC7489.

It is recommended to use DMARC with one of the underlaying standards Sender Policy Framework (SPF) (RFC 7208) and Domain Keys Identified Mail (DKIM) (RFC 6376).

For domain names that are not used for sending email, the standard recommends that you use Sender Policy Framework (SPF) to indicate that no email is sent from the domain name.

What will Norid add?

In the zone file for each of the domain names Norid will add two TXT posts. One for SPF and one for DMARC. These will look like this:

<municipal>.no.              IN     TXT         "v=spf1 -all"

_dmarc.<municipal>.no.      IN      TXT        "v=DMARC1; p=reject; sp=none"

This will contribute to prevent abuse of these domain names, without affecting email distribution from sub domains.

DMARC and SPF is recommended by the authorities

DMARC is a recommended IT-standard for the Government and the municipalities in order to prevent emails with a forged sender address. The Norwegian Digitalisation Agency (Digdir) has included DMARC as a recommended standard in the reference catalogue for IT standards (in Norwegian only).

DMARC is also recommended by The Norwegian National Security Authority (NSM) as a protection mechanism for transfer of email between email servers.

After login a dialogue box will pop up where you have to confirm registered contact information for your organisation, primary contact and email list.

Only users with admin rights will get the dialogue box, and the contact information has to be confirmed once every six months.

Confirmation of contact information will be implemented on Tuesday 5 December 2023. All registrars must confirm their contact information the first time they log in after this date.

Updated contact information is necessary to comply with the requirements in the registrar agreement.

Contact us on info@norid.no if you experience problems logging in or confirming the contact information.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

When the organization a domain name is registered to is deleted from the Central Coordinating Register for Legal Entities, or the subscription is not extended by the expiration date, our system automatically initiates a process to delete the domain name.

In the current routine the subscriber receives a letter as the final notification, if the cause for deletion has not been resolved after email notification.

For a period of 6 months starting 1 November, however, we will not send any letters, only email notifications. Apart from this, the deletion processes will run as normal, with the same deadlines.

After the six month period we will evaluate whether we should resume with letters or continue with notifications by emails only.

Why is Norid doing this?

On average we send out about 7000 letters each month as part of the deletion processes. This leads to big climate emissions that could be avoided. Norid aims to operate sustainably and climate friendly. We will therefore stop sending these letters for six months to see if this has any effect on the renewal rates, and thus if we can cut the letters permanently in the future.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

Some smaller and partly hidden changes have been made to meet requirements from Universal Design and newer web standards. There are no other functional changes.

The client was placed in the test system on Thursday 24 August 2023 and will run there for two weeks before it is launched in production.

The change is linked to a published vulnerability in EPP and is part of our continuous efforts to keep our solutions robust, secure and stable. The vulnerability concerns XML-references and is often designated as "XXE".

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

The following certificates will be renewed:

• epp.norid.no
• eppclient.norid.no
• registrar.norid.no

This will not affect the availability of these services.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

Monday 3 April: Normal opening hours
Tuesday 4 April: Normal opening hours
Wednesday 5 April: 10.00 am - 12.00 noon
Thursday 6 April - Monday 10 April: Closed

The zone file will be published as usual during Easter.

We wish you all a Happy Easter.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

When the organization a domain name is registered to is deleted from the Central Coordinating Register for Legal Entities, or the subscription is not extended by the expiration date, our system automatically initiates a process to delete the domain name.

The current routine is that the subscriber receives a letter as the final notification, if the cause for deletion has not been resolved after email notification.

In week 6, 7, 8 and 9 (the whole month of February), however, we will not send any letters, only email notifications. Apart from this, the deletion processes will run as normal, with the same deadlines. As of week 10 (6 March), letters will be sent out again as usual.

Why is Norid doing this?

On average we send out about 7000 letters each month as part of the deletion processes. This leads to big climate emissions that could be avoided. Norid aims to operate sustainably and climate friendly. We will therefore stop sending these letters for four weeks to see if this has any effect on the renewal rates, and thus if we can cut the letters permanently in the future.

This means that new and extended domain name subscriptions as well as transfers will cost 65 NOK (excluding VAT) as of 1 April 2023. The first invoice with new prices will be sent out in May 2023.

Update in Appendix K: Subscription fee

More information about payment for domain name subscriptions

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

Friday 23 December: 10 am - 2 pm
Monday 26 December: closed
Tuesday 27 December: closed
Wednesday 28 December: 10 am - 2 pm
Thursday 29 December: 10 am - 2 pm
Friday 30 December: 10 am - 2 pm

The zone file will be produced at the normal times through the holidays.

We wish you all a Merry Christmas and a Happy New Year.

You can read more about the service, and how to make authenticated queries, on our web site.

You can check your activity on the registrar web under “Domain portfolio” and Transactions.

If you have not registered or extended at least 100 domain name subscriptions by the end of this year you must pay a fee that covers the difference between the sum of 100 subscription fees and the amount that you have already paid for subscriptions during this calendar year. The fee will be billed in January 2023.

Read more about the annual registrar fee

Agenda and registration

The seminar is in Norwegian only.

Read more about the survey

Click here to start the survey

If you are not the correct recipient for this survey, please forward it to one of your colleagues that can answer. The survey takes about 2-3 minutes.

Click here to start the survey

Please answer the survey by 7 November 2022.

The letters RDAP stand for Registration Data Access Protocol. Norid’s RDAP service is based on the international RDAP protocol. The service is designed as a REST-API and is therefore well suited for automated lookups.

More information and the agenda

Authenticated access is available for all registrars. To gain access you must add a new user on the registrar web. We plan to open for authenticated acces in our production RDAP service in autumn this year.

Documentation on how make authenticated queries, and the extended capabilities it gives, can be found in the RDAP documentation on our web site. There you can also find information about how create a user to access the service.

We will soon send you a survey about RDAP which we hope you will answer. There will also be a session on the registrar seminar about RDAP and authentication.

All registered data is kept in the new version. This includes all users, so you should be able to log in with your existing username and password.

Please see our previous newsletter for information about what is new

Check your registered data

Even if all your registered data is kept in the new version, we recommend that you log in to the registrar web and check that the information is correct. We especially recommend that you check the following: 

• Contact information registered for your organization and primary contact. Pay special attention to your public contact information. 
• Billing address: it is now possible to choose that your billing address should be the same as your organisation address. If this is the case for you, we recommend that you check the box “Use your organisation address” under Economy and Billing address. Your billing address will then be automatically updated if you change your organisation address.  
• Email addresses subscribed to the email list for registrars  
• IP-addresses registered for access to the systems. We recommend that you remove any IP-addresses that are no longer in use and add a description for the IP-addresses that you want to keep. 
• Registered users on the registrar web, and if their permissions for access are correct. 

Check if you have achieved the minimum activity this year

All registrars must pay for at least 100 domain name subscriptions each calendar year. 

On the page “Domain portfolio” under Transactions you can check your activity so far this year. 

If you have not registered or extended at least 100 domain name subscriptions by the end of this year you must pay a fee that covers the difference between the sum of 100 subscription fees and the amount that you have already paid for subscriptions during this calendar year. The fee will be billed in January 2023.  

Read more about the annual registrar fee

New API and possibilities for downloading data 

The registrar web now offers an API which should be used for downloading portfolio lists. 

Before you use the API you must create an API user. The API requires authentication with this username and password, and then supplies a token for further use. A link to the API documentation can be found at the bottom of the domain portfolio page.  

Contact us if you have any questions 

If there is anything you miss, or if you have other feedback regarding the new registrar web, you can send this to info@norid.no. We also want to hear from you if any of the features do not work as expected. 

The look of the current registrar web has largely remained unchanged since its launch, and we have long wished to revise and modernise this part of our websites, too.

Our goal with the new registrar web is to make it easier to find the information you need and make it easier to keep your contact information updated. We have also added some new features.

We hope that the end product is a more user-friendly registrar web that meets your needs as a registrar, while also complying with the universal design requirements.

Login

All the information you have registered in the current regiatrar web will be kept and used in the new version. This includes all your users, so you can log in with the same username and password you already have.

What user level you have will decide how much information is available to you on the registrar web. Users with read-only access can see most of the contents, but they cannot make any changes to it. Information not available via read-only access is, EPP settings, IP lists and access to user administration.

Users with admin access can see all content available to the registrar in the registrar web. They can also make changes and updates to the registrar’s contact information, users and more.

Important changes

Design

The design on the registrar web has been harmonised with the design on Norid’s technical website (teknisk.norid.no). This includes the menu setup. The design is set to meet the requirements for universal design.

It is also responsive and supports tablet devices but does not yet support mobile phones.

Contents

A new feature on the registrar web is a dashboard where you are presented with key figures for your portfolio, and links to the most used information in the current registrar web.

All information about economy/money will now be available under a common menu. This is where you find which invoice address you have registered, read your invoicing details and download copies of your invoices.

All help pages have been removed and replaced with inline help buttons: (?).

Bi-lingual

The registrar web has only been available in English so far. The new version will also be available in Norwegian.

Lost password

You can now request a link to set a new password for an existing user on the registrar web. For this to work, the user must have an email address registered in their user profile. We therefore recommend that you look over the user profiles in your registrar account and check that they all have valid email addresses registered.

When this is set up properly, you will only ever need to ask Norid for help in cases where the user profile lacks a valid email address, and no other local users with admin access are available to do the updates.

Description of IP-addresses

In the list where you whitelist IP-addresses and -blocks for access to the registry and whois services, we have added a description field. You can use this to describe who is using each IP-address.

We hope this will make it easier to maintain the whitelist, and remove IP-addresses that should no longer have access to the services.

API

We offer a new JSON/REST-API that lets you download and read data files. To use this service, you must create an API user account that will be used for authentication against the API. You do this in the user admin page on the registrar web.

Confirm your contact information

You must confirm your contact information every six months. When the confirmation is due, a dialogue box will appear when you log in.

The test system

The test system will be updated with the new version of the registrar web on Tuesday 20 September 2022. We recommend that you familiarise yourself with the new registrar web in the test system before it goes live in the production system on 11 October 2022.

Please note that part 2 of the registrar test will be updated due to the coming changes in the registrar web.

If there is anything you miss, or if you have other feedback regarding the new registrar web, you can send this to info@norid.no. We also want to hear from you if any of the features do not work as expected.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

Our society is becoming increasingly dependent on the internet. This heightens the security requirements for all actors that take part in delivering our digital foundation. The domain name system is a fundamental function, necessary for the internet infrastructure to work. For Norid as a registry it is therefore very important to ensure the security and the availability of the registry service and the domain name system for the Norwegian top level domain names.

In June we achieved an ISO 27001 certification (PDF) which covers all of our services, systems, locations and employees. ISO 27001 is an international recognized standard which describes best practice for how companies protect their information values, address risk management and continually improve the work with information security.

 – We are very proud to have passed the certification. It is a result of our systematic and continuous work with information security, something which involves all employees in the organisation, says Hilde Thunem, managing director in Norid.

• epp.norid.no
• eppclient.norid.no
• registrar.norid.no

This will not affect the availability of these services.

NB: New intermediate certificate will be installed.

• The EPP server will on the commands 'domain create' and 'domain update' return a warning message if none of the nameservers for the domain are reachable on IPv6. This is only a warning message. It will not cause the command to fail.
• For each registrar, a daily updated list is made of domains having no nameservers with IPv6 connectivity. The lists can be downloaded from the registrarweb. We encourage registrars to use the list to add IPv6 connectivity to all their domains which do not already have it.
• The web based dnscheck service, dnscheck.norid.no, is changed so that a warning message is given (but not an error) for all nameservers which does not have IPv6 connectivity.

These measures are now activate in production. We are planning to change the DNS policy so that IPv6 connectivity on at least one nameserver will be required for domains under .no. The date for this change has not yet been set, and we want to ensure that a significant part of the domains already has IPv6 connectivity before such a requirement is introduced.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

The registry system (EPP and the EPP client), PID automaton, applicant declaration system, registrar web, whois, RDAP and DAS will be unavailable during the maintenance window.

The name service (DNS) will not be affected.

Agenda and registration

The seminar will be in Norwegian only.