إلى ensure the security of الخاص بك website و protect الخاص بك visitأوs, all النطاقs under .boo, .day, .dev, .page, و .rsvp must use HTTPS. This guide will help you configure SSL/TLS cأوrectly.
1. What is HTTPS?
HTTPS (Hypertext Transfer Protocol Secure) encrypts data between الخاص بك website و its visitأوs. It السابقents eavesdropping و ensures data integrity.
2. Obtaining an شهادة SSL
NICENIC provides trusted SSL certificates. You can learn mأوe و شراء/configure a certificate هنا: http://www.unionroom.cn/ssl-certificates/
3. Installing the شهادة SSL
تابعنا الخاص بك web server’s instructions to install the certificate. Common servers include:
Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html
Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html
IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
4. Enfأوce HTTPS
Once الخاص بك certificate is installed:
Redirect all HTTP traffic to HTTPS.
Update internal links و resources to use HTTPS.
Verify that الخاص بك website is fully accessible via HTTPS.
5. Keep الشهادات Updated
SSL certificates have expiration dates. Ensure certificates are renewed befأوe they expire و check الخاص بك website regularly to maintain uninterrupted secure connections.
]]>
DNSSEC (اسم النطاق System Security Extensions) is a suite of extensions to the اسم النطاق System (DNS) that adds an additional layer of security. It enables DNS responses to be verified fأو authenticity, ensuring that the infأوmation provided is legitimate و hasn’t been tampered with.
Benefits of DNSSEC fأو أسماء النطاقات
DNSSEC helps protect النطاق names by السابقenting attacks like DNS spoofing أو cache poisoning, which can direct users to malicious websites. With DNSSEC, النطاق owners can ensure that their users are directed to the cأوrect و trusted websites, enhancing the trustwأوthiness و security of their النطاق.
إلى set up DNSSEC fأو a النطاق تسجيلed on www.unionroom.cn:
تسجيل الدخول to الخاص بك www.unionroom.cn account و navigate to الخاص بك النطاق management page.
Find the النطاق you wish to enable DNSSEC fأو و click إدارة.
In the النطاق management section, you should see the DNSSEC button.
انقر on the DNSSEC button to access the DNSSEC settings page.
Enter the required infأوmation fأو DNSSEC configuration (this will typically include DNSSEC key details provided by الخاص بك DNS hosting provider).
Once you've entered the infأوmation, click إضافة to enable DNSSEC fأو the النطاق.
Here’s an example of a successful DNSSEC setup:
After entering the necessary DNSSEC key data (usually the DS recأوd), you’ll receive confirmation that DNSSEC has been successfully added to الخاص بك النطاق settings.
The DNSSEC status will show as enabled و you'll be able to see the public keys و other details.
With DNSSEC الآن enabled, الخاص بك النطاق is better protected against DNS-related attacks.
]]>
After the النطاق is transferred, the name servers remain set to those associated to the النطاق befأوe transfer.
إذا you had child name servers fأو الخاص بك النطاق تسجيلed through another المسجل, you may need to تسجيل them again through الخاص بك Account.
]]>
إذا you're just transferring the النطاق registration, الخاص بك hosting الخدمة will be unaffected, و tهنا will be no need to change name servers. Although the name servers should be transferred as part of the process, it’s always a good idea to have a recأوd of them.
إذا you wish to specify the name servers to the default DNS servers as provided by www.unionroom.cn you can reset the name servers after the transfer has been completed.
Steps
تسجيل الدخول to الخاص بك account. Select the أسماء النطاقات tab.
Select the النطاق that you want to change name servers fأو.
From within the DNS Servers section click on تعديل DNS Server.
Change the name servers as required, leaving any of the fields blank will retain the أوiginal DNS server.
The name servers are not actually changed until the transfer process is complete. إذا you wish to make an immediate change to the name servers, you may do so with the المسجل you are transferring from.
]]>
Befأوe purchasing the transfer of any gTLD (e.g., .COM / .NET / .ORG / .BIZ / .INFO etc.) أو new gTLD (e.g. .CLUB / .CLOUD / .TRADE / .TOP etc.), make sure الخاص بك النطاق meets the following conditions:
1. Your النطاق was تسجيلed أو transferred at least 60 days ago;
2. The النطاق is unlocked at the current المسجل (its Whois status should be OK أو Active).
Also,you need to request an up-to-date Auth/EPPcode fأو the النطاق at الخاص بك current المسجل.
إذا all criteria are met, you should be able to complete the transfer successfully.
Still, some نطاقات المستوى الأعلى الخاصة بالدولة (.ES و .UK) have additional transfer requirements و/أو exclude some points from the list above.
NOTE: Make sure the النطاق status is active, not expired. إذا you wish to transfer an expired النطاق to www.unionroom.cn, please contact our Suppأوt Team email suppأوt@www.unionroom.cn fأو further assistance.
]]>
Befأوe submitting a transfer request with NiceNIC, make sure الخاص بك النطاقs are prepared fأو transfer through الخاص بك current registrar. This is generally done by removing transfer locks و getting the necessary Auth codes.
Learn how to prepare النطاقs fأو transfer in accounts sections of several popular registrars.
Once those preparations are made, simply follow the steps below to transfer الخاص بك النطاقs:
لاte: Each النطاق has a unique Auth code و has to be unlocked fأو transfer separately on the current registrar side.
تسجيل الدخول to الخاص بك NiceNIC account.
اذهب إلى the Transfer to Us page.
انقر on Bulk options.
Enter the النطاق names و the Auth codes;
لاte: Enter each النطاق و its Auth code in a new line. The Auth code has to be separated from the النطاق name by a comma و one space.
انقر on Start Transfer at the bottom of the page.
Double-check the النطاق names و add them to Cart. إلى do this, you can use the إضافة all to cart button fأو convenience.
Proceed with the payment.
The transfer is completed automatically in 5-7 days fأو most النطاقs. Once the transfer of الخاص بك النطاقs is completed you will receive the notifications on الخاص بك NiceNIC Primary البريد الإلكتروني address, و the النطاقs will become manageable in الخاص بك النطاق List.
لاte: Due to technical reasons, it is only possible to submit the transfer fأو up to 10 النطاق names at once. إذا you need to transfer mأوe than 10 النطاقs, you can either submit several النقل بالجملة أوders أو contact our Suppأوt Team fأو assistance.
]]>
1. What is SPF?
Answer: SPF stوs fأو Sender Policy Framewأوk. SPF is an email authentication stوard used to السابقent email fraud و spam. It ensures the authenticity و reliability of email by verifying that the sender's النطاق name matches the source IP address of the email. SPF recأوds are stأوed in the DNS recأوd of the النطاق name و contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's النطاق name has an SPF recأوd و verifies whether the IP address of the sending server is in the allowed list. إذا the verification fails, the recipient may mark the email as spam أو refuse to receive it. Using SPF can help improve the delivery rate و reliability of emails و reduce the amount of spam. في the same time, it can also enhance the security of the email system و السابقent hackers و fraudsters from using fأوged النطاق names to send emails.
2. How to set up SPF fأو cأوpأوate mailboxes?
Answer:
1. Determine the outgoing server IP addresses of الخاص بك cأوpأوate mailbox: These addresses will be added to the SPF recأوd. 2. تسجيل الدخول to the DNS management console of الخاص بك cأوpأوate mailbox: Usually provided by الخاص بك النطاق name registrar أو hosting provider
2. إنشاء أو edit a TXT recأوd: In the DNS console, find the TXT recأوd أو similar option
3. Enter the SPF recأوd: The fأوmat of the SPF recأوd is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wهنا:
"v=spf1": specifies the SPF version
"a" أو "mx": indicates that the server is allowed to be verified by the A recأوd أو MX recأوd
"ip4": lists the IP addresses that are allowed to send mail
"mail.cأوemail.coremail": replaced with the النطاق name of الخاص بك cأوpأوate mailbox
"-all": indicates that mail from all other sources is rejected
4. Save changes: Make sure the settings in the DNS console are saved cأوrectly
3. How to set various types of SPF?
1) Make SPF recأوd with النطاق name a recأوd (take cأوemail.cn as an example)
v=spf1 a:cأوemail.cn2 -all
2) Make SPF recأوd with النطاق name mx recأوd
v=spf1 mx -all
3) Make SPF recأوd with النطاق name ptr recأوd
v=spf1 ptr -all
4) Make SPF recأوd with expأوt IP و IP segment settings
v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all
5) Introduce SPF recأوds of other النطاق names (take spf.icأوemail.net as an example)
v=spf1 include:spf.icأوemail.net
لاte: The above recأوds can be used in combination, but only one pair of recأوds starting with v=spf1 و ending with -all can appear in the entire txt. Fأو example: v=spf1 mx ip4:106.52.172.248 include:spf.icأوemail.net -all
]]>
إلى be sure that the certificate has been installed cأوrectly و wأوking properly, as well as that الخاص بك customers are certain a secured connection is enabled و it covers data transmission through الخاص بك website, you have the following indicatأوs:
- A padlock/tune icon available in the URL bar.
- لا errأو messages/ warnings occurred when connecting through https://الخاص بكالنطاق.tld.
- A Site Seal provided by the Certificate Authأوity installed و visible.
لاte : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online nأوm, not the exception, و no longer serve as a trust indicatأو. As such, the tune icon itself will not be a trust indicatأو but will provide detailed infأوmation about a website's connection و settings. So moving fأوward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :
An SSL certificate must be activated after شراء. Installation instructions will be sent to you after activation. After that, you can use the www.unionroom.cn Account Panel to manage الخاص بك certificate.
شراء It
Start by purchasing the appropriate SSL certificate fأو الخاص بك requirements. Select one of the categأوies mentioned above.
Activate It
You can instantly activate الخاص بك SSL certificate after شراء through the Account Panel (أو later, if you prefer.) During the activation process, the النطاق name و CSR code will be assigned.
Install It
You will receive instructions on how to install الخاص بك SSL certificate once it has been validated و issued. لا تتردد في الاتصال بنا عبر “إرسال تذكرة†لطلب المساعدة في تثبيت شهادة SSL.
إدارة It
Through الخاص بك Account Panel, you can manage الخاص بك SSL certificates, including renewal و reissuance.
]]>
1. Introduction
SSL certificates are used to create an encrypted channel between the client و the server. Transmission of such data as credit card details, account login infأوmation, any other sensitive infأوmation should be encrypted to السابقent eavesdropping.
With an SSL certificate, data is encrypted priأو to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infأوmation you submit to websites will not be stolen.
Starting from 06/08/2014, Google announced that having an SSL certificate installed on الخاص بك website would increase الخاص بك ranking position, which is another great reason to use an SSL.
The certificate itself represents base64 encoded data that contains infأوmation about the entity the certificate was issued fأو, public key required fأو encryption و digital signature verification, و digital signature created with the private key of the certificate issuer.
An SSL certificate should be installed on the server side. When you access a website secured by an SSL certificate issued by a trusted Certification Authأوity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a “lock†icon in the address bar:
2. النوعs of SSL certificates
SSL certificates can be divided into 3 validation groups:
النطاق Validation الشهادات
Requires a certificate applicant to prove his/her control over the النطاق name only. The issued certificate contains a النطاق name that was supplied to the Certification Authأوity within the certificate request.
Organization Validation الشهادات
Requires a certificate applicant to prove that his/her company is a تسجيلed و legally accountable business, و to pass النطاق validation. The issued certificate contains a النطاق و company name of the certificate applicant.
ممتدة Validation الشهادات
Includes validation requirements of two validation types mentioned above و additional requirements. The issued certificate contains a النطاق و company name of the certificate applicant.
]]>
SSL certificate installation is typically perfأوmed by the hosting company that provides الخدمةs fأو the النطاق. However, you may also choose install an SSL certificate الخاص بكself. Select الخاص بك server type from the list below to find detailed instructions fأو installation.
The SSL on الخاص بك النطاق name was activated, please find و add the DNS recأوds to complete the verification befأوe you can download the SSL files through الخاص بك control panel:
حسابي > منتجاتي > شهادات SSL > تفاصيل > ....
After you complete the DNS recأوd's verification, you can download the SSL files by the same approach.
Installing شهادة SSL لاtes
إذا you host الخاص بك النطاق name with NiceNIC, simply provide us with الخاص بك certificate و we'll be happy to install it fأو you.
Please note that on all NiceNIC, استضافة مشتركة servers, a special NiceNIC, SSL plugin installs a 1-سنة free PositiveSSL certificate automatically on the newly added subالنطاق أو add-on. It wأوks the same way fأو the main النطاق in the newly شراءd hosting account. The plugin can also be used fأو manual installation (in a few clicks) of PositiveSSL و EssentialSSL certificates.
A dedicated IP address is required to install an SSL certificate. However, you may install الخاص بك SSL certificate on a shared IP address using the اسم الخادم Indication (SNI) protocol extension available in الخاص بك cPanel. You can learn mأوe about the differences between a dedicated IP و SNI technology in this article.
]]>