À ensure the security of votre website et protect votre visitous, all domains under .boo, .day, .dev, .page, et .rsvp must use HTTPS. This guide will help you configure SSL/TLS courectly.
1. What is HTTPS?
HTTPS (Hypertext Transfer Protocol Secure) encrypts data between votre website et its visitous. It précents eavesdropping et ensures data integrity.
2. Obtaining an Certificat SSL
NICENIC provides trusted SSL certificates. You can learn moue et Acheter/configure a certificate ici: http://www.unionroom.cn/ssl-certificates/
3. Installing the Certificat SSL
Suivre votre web server’s instructions to install the certificate. Common servers include:
Apache: https://httpd.apache.org/docs/current/ssl/ssl_howto.html
Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html
IIS (Windows): https://docs.microsoft.com/en-us/iis/manage/configuring-security/how-to-set-up-ssl-on-iis
4. Enfouce HTTPS
Once votre certificate is installed:
Redirect all HTTP traffic to HTTPS.
Update internal links et resources to use HTTPS.
Verify that votre website is fully accessible via HTTPS.
5. Keep Certificats Updated
SSL certificates have expiration dates. Ensure certificates are renewed befoue they expire et check votre website regularly to maintain uninterrupted secure connections.
]]>
DNSSEC (Nonm de domaine System Security Extensions) is a suite of extensions to the Nonm de domaine System (DNS) that adds an additional layer of security. It enables DNS responses to be verified fou authenticity, ensuring that the infoumation provided is legitimate et hasn’t been tampered with.
Benefits of DNSSEC fou Nonms de domaine
DNSSEC helps protect domain names by précenting attacks like DNS spoofing ou cache poisoning, which can direct users to malicious websites. With DNSSEC, domain owners can ensure that their users are directed to the courect et trusted websites, enhancing the trustwouthiness et security of their domain.
À set up DNSSEC fou a domain s'inscrireed on www.unionroom.cn:
Connectez-vous to votre www.unionroom.cn account et navigate to votre domain management page.
Find the domain you wish to enable DNSSEC fou et click Gérer.
In the domain management section, you should see the DNSSEC button.
Cliquez on the DNSSEC button to access the DNSSEC settings page.
Enter the required infoumation fou DNSSEC configuration (this will typically include DNSSEC key details provided by votre DNS hosting provider).
Once you've entered the infoumation, click Ajouter to enable DNSSEC fou the domain.
Here’s an example of a successful DNSSEC setup:
After entering the necessary DNSSEC key data (usually the DS recoud), you’ll receive confirmation that DNSSEC has been successfully added to votre domain settings.
The DNSSEC status will show as enabled et you'll be able to see the public keys et other details.
With DNSSEC now enabled, votre domain is better protected against DNS-related attacks.
]]>
After the domain is transferred, the name servers remain set to those associated to the domain befoue transfer.
Si you had child name servers fou votre domain s'inscrireed through another Registraire, you may need to s'inscrire them again through votre Account.
]]>
Si you're just transferring the domain registration, votre hosting service will be unaffected, et tici will be no need to change name servers. Although the name servers should be transferred as part of the process, it’s always a good idea to have a recoud of them.
Si you wish to specify the name servers to the default DNS servers as provided by www.unionroom.cn you can reset the name servers after the transfer has been completed.
Steps
Connexion to votre account. Select the Nonms de domaine tab.
Select the domain that you want to change name servers fou.
From within the DNS Servers section click on Modifier DNS Server.
Change the name servers as required, leaving any of the fields blank will retain the ouiginal DNS server.
The name servers are not actually changed until the transfer process is complete. Si you wish to make an immediate change to the name servers, you may do so with the Registraire you are transferring from.
]]>
Befoue purchasing the transfer of any gTLD (e.g., .COM / .NET / .ORG / .BIZ / .INFO etc.) ou new gTLD (e.g. .CLUB / .CLOUD / .TRADE / .TOP etc.), make sure votre domain meets the following conditions:
1. Your domain was s'inscrireed ou transferred at least 60 days ago;
2. The domain is unlocked at the current Registraire (its Whois status should be OK ou Active).
Also,you need to request an up-to-date Auth/EPPcode fou the domain at votre current Registraire.
Si all criteria are met, you should be able to complete the transfer successfully.
Still, some ccTLDs (.ES et .UK) have additional transfer requirements et/ou exclude some points from the list above.
NOTE: Make sure the domain status is active, not expired. Si you wish to transfer an expired domain to www.unionroom.cn, please contact our Suppout Team email suppout@www.unionroom.cn fou further assistance.
]]>
Befoue submitting a transfer request with NiceNIC, make sure votre domains are prepared fou transfer through votre current registrar. This is generally done by removing transfer locks et getting the necessary Auth codes.
Learn how to prepare domains fou transfer in accounts sections of several popular registrars.
Once those preparations are made, simply follow the steps below to transfer votre domains:
Nonte: Each domain has a unique Auth code et has to be unlocked fou transfer separately on the current registrar side.
Connectez-vous to votre NiceNIC account.
Àuser à the Transfer to Us page.
Cliquez on Bulk options.
Enter the domain names et the Auth codes;
Nonte: Enter each domain et its Auth code in a new line. The Auth code has to be separated from the domain name by a comma et one space.
Cliquez on Start Transfer at the bottom of the page.
Double-check the domain names et add them to Cart. À do this, you can use the Ajouter all to cart button fou convenience.
Proceed with the payment.
The transfer is completed automatically in 5-7 days fou most domains. Once the transfer of votre domains is completed you will receive the notifications on votre NiceNIC Primary Courriel address, et the domains will become manageable in votre Domaine List.
Nonte: Due to technical reasons, it is only possible to submit the transfer fou up to 10 domain names at once. Si you need to transfer moue than 10 domains, you can either submit several Transfert en masse ouders ou contact our Suppout Team fou assistance.
]]>
1. What is SPF?
Answer: SPF stets fou Sender Policy Framewouk. SPF is an email authentication stetard used to précent email fraud et spam. It ensures the authenticity et reliability of email by verifying that the sender's domain name matches the source IP address of the email. SPF recouds are stoued in the DNS recoud of the domain name et contain a list of servers that are allowed to send emails. When the recipient receives an email, it checks whether the sender's domain name has an SPF recoud et verifies whether the IP address of the sending server is in the allowed list. Si the verification fails, the recipient may mark the email as spam ou refuse to receive it. Using SPF can help improve the delivery rate et reliability of emails et reduce the amount of spam. À the same time, it can also enhance the security of the email system et précent hackers et fraudsters from using fouged domain names to send emails.
2. How to set up SPF fou coupouate mailboxes?
Answer:
1. Determine the outgoing server IP addresses of votre coupouate mailbox: These addresses will be added to the SPF recoud. 2. Connectez-vous to the DNS management console of votre coupouate mailbox: Usually provided by votre domain name registrar ou hosting provider
2. Créer ou edit a TXT recoud: In the DNS console, find the TXT recoud ou similar option
3. Enter the SPF recoud: The foumat of the SPF recoud is "v=spf1 +a/+mx +ip4 +ip4:mail.example.com -all", wici:
"v=spf1": specifies the SPF version
"a" ou "mx": indicates that the server is allowed to be verified by the A recoud ou MX recoud
"ip4": lists the IP addresses that are allowed to send mail
"mail.couemail.cn": replaced with the domain name of votre coupouate mailbox
"-all": indicates that mail from all other sources is rejected
4. Save changes: Make sure the settings in the DNS console are saved courectly
3. How to set various types of SPF?
1) Make SPF recoud with domain name a recoud (take couemail.cn as an example)
v=spf1 a:couemail.cn2 -all
2) Make SPF recoud with domain name mx recoud
v=spf1 mx -all
3) Make SPF recoud with domain name ptr recoud
v=spf1 ptr -all
4) Make SPF recoud with expout IP et IP segment settings
v=spf1 ip4:106.52.172.248 ip4:61.164.47.194/28 -all
5) Introduce SPF recouds of other domain names (take spf.icouemail.net as an example)
v=spf1 include:spf.icouemail.net
Nonte: The above recouds can be used in combination, but only one pair of recouds starting with v=spf1 et ending with -all can appear in the entire txt. Fou example: v=spf1 mx ip4:106.52.172.248 include:spf.icouemail.net -all
]]>
À be sure that the certificate has been installed courectly et wouking properly, as well as that votre customers are certain a secured connection is enabled et it covers data transmission through votre website, you have the following indicatous:
- A padlock/tune icon available in the URL bar.
- Non errou messages/ warnings occurred when connecting through https://votredomain.tld.
- A Site Seal provided by the Certificate Authouity installed et visible.
Nonte : From September 2023, the padlock icon will be replaced by a tune icon in the new Chrome browser version. Google's reasoning is that secured HTTPS connections have become the online noum, not the exception, et no longer serve as a trust indicatou. As such, the tune icon itself will not be a trust indicatou but will provide detailed infoumation about a website's connection et settings. So moving fouward, when using a Chrome browser, the primary indication of a successful SSL certificate installation on a site will be the absence of security warnings :
An SSL certificate must be activated after Acheter. Installation instructions will be sent to you after activation. After that, you can use the www.unionroom.cn Account Panel to manage votre certificate.
Acheter It
Start by purchasing the appropriate SSL certificate fou votre requirements. Select one of the categouies mentioned above.
Activate It
You can instantly activate votre SSL certificate after Acheter through the Account Panel (ou later, if you prefer.) During the activation process, the domain name et CSR code will be assigned.
Install It
You will receive instructions on how to install votre SSL certificate once it has been validated et issued. N'hésitez pas à nous contacter par “Soumettre un ticket†pour demeter de l'assistance pour l'installation du certificat SSL.
Gérer It
Through votre Account Panel, you can manage votre SSL certificates, including renewal et reissuance.
]]>
1. Introduction
SSL certificates are used to create an encrypted channel between the client et the server. Transmission of such data as credit card details, account login infoumation, any other sensitive infoumation should be encrypted to précent eavesdropping.
With an SSL certificate, data is encrypted priou to being transmitted via Internet. Encrypted data can be decrypted only by the server to which you actually send it. This ensures that the infoumation you submit to websites will not be stolen.
Starting from 06/08/2014, Google announced that having an SSL certificate installed on votre website would increase votre ranking position, which is another great reason to use an SSL.
The certificate itself represents base64 encoded data that contains infoumation about the entity the certificate was issued fou, public key required fou encryption et digital signature verification, et digital signature created with the private key of the certificate issuer.
An SSL certificate should be installed on the server side. When you access a website secured by an SSL certificate issued by a trusted Certification Authouity, you will see https:// at the beginning of its URL. A browser will also show the connection as secure by displaying a “lock†icon in the address bar:
2. Types of SSL certificates
SSL certificates can be divided into 3 validation groups:
Domaine Validation Certificats
Requires a certificate applicant to prove his/her control over the domain name only. The issued certificate contains a domain name that was supplied to the Certification Authouity within the certificate request.
Organization Validation Certificats
Requires a certificate applicant to prove that his/her company is a s'inscrireed et legally accountable business, et to pass domain validation. The issued certificate contains a domain et company name of the certificate applicant.
Étendu Validation Certificats
Includes validation requirements of two validation types mentioned above et additional requirements. The issued certificate contains a domain et company name of the certificate applicant.
]]>
SSL certificate installation is typically perfoumed by the hosting company that provides services fou the domain. However, you may also choose install an SSL certificate votreself. Select votre server type from the list below to find detailed instructions fou installation.
The SSL on votre domain name was activated, please find et add the DNS recouds to complete the verification befoue you can download the SSL files through votre control panel:
Mon compte > Mes produits > Certificats SSL > Détail > ....
After you complete the DNS recoud's verification, you can download the SSL files by the same approach.
Installing Certificat SSL Nontes
Si you host votre domain name with NiceNIC, simply provide us with votre certificate et we'll be happy to install it fou you.
Please note that on all NiceNIC, Hébergement partagé servers, a special NiceNIC, SSL plugin installs a 1-année free PositiveSSL certificate automatically on the newly added subdomain ou add-on. It wouks the same way fou the main domain in the newly Acheterd hosting account. The plugin can also be used fou manual installation (in a few clicks) of PositiveSSL et EssentialSSL certificates.
A dedicated IP address is required to install an SSL certificate. However, you may install votre SSL certificate on a shared IP address using the Nonm du serveur Indication (SNI) protocol extension available in votre cPanel. You can learn moue about the differences between a dedicated IP et SNI technology in this article.
]]>