Användning

Tecken i domännamn

Tillåtna tecken: a-z, 0-9, -

* Minimum: '''2'''
* Maximum: '''63'''
* Letters and numbers
* Hyphens ("-"), however not at the beginning or directly in front of the TLD

Toppdomänen stödjer IDN

## IDN Information

The national characters å, ä and ö.

Registry Villkor

https://www.traficom.fi/en/communications/fi-domains/all-pages-and-services-fi-domain-disputes?active=2&limit=20&offset=0

Policy Tvistelösning

Names can be suspended or revoked by registry if suspected of infringement of another's name

https://domain.fi/info/en/index/yllapito/perusvaatimukset/verkkotunnuksenperuuttaminen/loukkaavatverkkotunnukset.html

Domänregistrering

Domänen registreras inte i realtid.

Begränsningar

## Domain Restrictions

- Although there are no more restrictions for ._fi_ registrations, the registry still demands several extensions
- DNSSEC does not support SHA-1
-


**The DNSSEC signing algorithm 5 - RSASHA1 (RSA/SHA-1) WILL NO LONGER BE SUPPORTED as of 13 September 2020**. .Fi domain names using Algorithm 5 keys will continue to operate normally and Traficom will not remove records currently in use from the ._fi_ root.

After the change, no new RSA/SHA-1 keys can be added. This means that another permitted algorithm must be used once the current keys are rotated out.


**Why this change is being made:**

The RSA/SHA-1 Algorithm is no longer considered secure.

At a later time, Algorithm 7 will also be phased out. We therefore recommend to discontinue its use. Once the change has taken effect, the supported DNSSEC signing algorithms are the following:

• Algorithm 7 - RSASHA1-NSEC3-SHA1

• Algorithm 8 - RSASHA256 (RSA/SHA-256)

• Algorithm 10 - RSASHA512 (RSA/SHA-512)

• Algorithm 13 - ECDSAP256SHA256 (ECDSA Curve P-256 with SHA-256)

The adoption of Algorithm 15 - Ed25519 is currently being considered and support for it will be available in the future.

Namnservrar

Toppdomänen kräver att minst 2 namnservrar används samt max 10 stycken.

Konfiguration av DNS

The name servers shall be equipped with NS records (Name Server) having
information on all name servers configured to serve the domain name. The NS
records shall point to servers, for which an A record (IP Address) has been
configured in name service.

To change the nameservers the AUTHORIZATION KEY have to be provided which is mandatory.

Förnyelse

Domänen kan förnyas för följande perioder

I vissa fall går det att förnya domänen efter det att den förfallit.

Har domänen löpt ut kan den återställas för en extra kostnad. Det kan ske under en period av 30 dagar efter att domänen löpt ut, alternativt efter att grace period löpt ut. Denna kostnad är i regel ganska hög, kring 5000SEK.