‹ Back
Deploy360 29 September 2014

Tunisia Signs .TN And Arabic IDN TLD With DNSSEC

Dan York
By Dan YorkDirector, Web Strategy & Project Lead, Open Standards Everywhere

Tunisia FlagLast Friday Tunisia became the latest country to be able to offer people registering domains in their country-code top-level domain (ccTLD) the higher security and trust that comes with DNSSEC. On September 26, 2014, DS records appeared in the root zone of DNS for two TLDs:

People who subscribe to our weekly distribution of DNSSEC deployment maps will have seen in the email message that went out this morning a new bright green country on the northern coast of Africa:

Africa with Tunisia highlighted


The data files will also reflect the status of the Arabic internationalized domain name (IDN) .تونس  although the data files reference that as “xn--pgbs0dh”.

Now, it is important to note that while the TLDs themselves are signed with DNSSEC and have a DS record in the root zone of DNS, this does NOT necessarily mean that second-level domains under these two TLDs can sign their domains and submit the DS records to the TLD registries.  That “Operational” stage of DNSSEC deployment will hopefully come soon, but that is something the TLD registries themselves have to start doing.  Please read our 5 Stages of DNSSEC Deployment page to understand where these TLDs are in the deployment cycle.

What this does mean is that there is one fewer barrier in the way for domain registrants who want to sign their domain under either .TN or .تونس. At some point soon they will hopefully be able to follow our information about how to sign your domain and upgrade the security of their domains.

Congratulations to the Agence Tunisienne d’Internet in Tunisia for making this happen!  It’s great to see ccTLDs throughout Africa starting to add the security of DNSSEC – we look forward to seeing the whole continent appear green on our maps!

P.S. Tunisian flag image courtesy of Wikipedia.

‹ Back

Disclaimer: Viewpoints expressed in this post are those of the author and may or may not reflect official Internet Society positions.

Related articles

4 NewgTLDs Launched Yesterday Marks Dawn of "DNSSEC From The Start" TLDs
Deploy36024 October 2013

4 NewgTLDs Launched Yesterday Marks Dawn of “DNSSEC From The Start” TLDs

Yesterday was a big day for the Domain Name System (DNS). After a long process, ICANN formally delegated the first...

Indonesia And Vanuatu Sign .ID and .VU With DNSSEC
Deploy36015 December 2014

Indonesia And Vanuatu Sign .ID and .VU With DNSSEC

We were very pleased to learn this morning that both Indonesia's .ID and Vanuatu's .VU country-code top-level domains (ccTLDs) had...

Yea! Austria (.AT) and Poland (.PL) Join DNSSEC-Signed TLDs Linked From The Root
Deploy3609 February 2012

Yea! Austria (.AT) and Poland (.PL) Join DNSSEC-Signed TLDs Linked From The Root

Two more top-level-domains (TLDs) joined the global DNSSEC "chain of trust" today! By way of two tweets from @RootChanges we...

Join the conversation with Internet Society members around the world