Chose your color

Frequently visited

Frequently asked questions

  • I am looking for a domain name registrant. Where can I look it up?

    The Whois is an easy-to-use tool for checking the availability of a .nl domain name. If the domain name is already taken, you can see who has registered it.

    On the page looking up a domain name you will find more information about what a domain name is, how the Whois works and how the privacy of personal data is protected. Alternatively, you can go straight to look for a domain name via the Whois.

  • I would like to transfer my domain name to another registrar. What is the procedure?

    To get your domain name transferred, you need the token (unique ID number) for your domain name. Your existing registrar has the token and is obliged to give it to you within five days, if you ask for it. The procedure for changing your registrar is described on the page transferring your domain name.

  • The details registered about me/my company are incorrect or out of date. How can I get them updated?

    To update the contact details associated with your domain name, you need to contact your registrar. Read more about updating contact details.

  • Why is my domain name in quarantine?

    When a domain name is cancelled, we aren't told the reason, so we can't tell you. You'll need to ask your registrar. The advantage of quarantine is that, if a name's cancelled by mistake, you can always get it back.

    One common reason is that the contract between you and your registrar says you've got to renew the registration every year. If you haven't set up automatic renewal and you don't renew manually, the registration will expire.

  • Ik heb een klacht over mijn provider/registrar. Kan ik daarvoor bij SIDN terecht?

    Wanneer je een klacht hebt over of een geschil met je registrar dan zijn er verschillende mogelijkheden om tot een oplossing te komen. Hierover lees je meer op pagina klacht over registrar. SIDN heeft geen formele klachtenprocedure voor het behandelen van een klacht over jouw registrar.

  • What conditions do I have to meet as a registrar?

    Would you like to be able to register domain names for customers or for your own organisation by dealing directly with SIDN? If so, you can become a .nl registrar. Read more about the conditions and how to apply for registrar status on the page becoming a registrar.

More frequently asked questions

Not enough interest in modern internet (security) standards

SIDN launches new webspace devoted to implementation of technical standards

Hands operating a keyboard above which virtual security icons are visible
  • Wednesday 15 December 2021

Earlier this year, the European Council (the EU's governing body) adopted the recommendations contained in the EU's new cyber-security strategy. That strategy sets out a framework for protecting the bloc's citizens and enterprises against online threats. At the strategy's heart are the concepts of security and openness. One of the strategy's concrete action points is the adoption of internet security standards. As well as promoting internet security and openness, such standards are seen by the EU as vital for improving the competitiveness of European industry. Although we welcome any effort to encourage the use of modern internet (security) standards, we don't believe that enough is yet being done on that score. The adoption of new technical standards is agonisingly slow, despite the abundant infrastructural benefits. So today we're launching an entire new area on our website, where all the information and tools we offer to help with the implementation of IPv6, DNSSEC, SPF/DKIM/DMARC, DANE and other standards are conveniently arranged and presented.

Statutory measures

The EU's cyber-security strategy identifies IPv6, DNS, routing and mail security as key focus areas. To be specific, the EU wants to see the adoption of DNSSEC, HTTPS, DNS over HTTPS (DoH), DNS over TLS (DoT), SPF, DKIM, DMARC, STARTTLS and DANE – all standards that both we and the Platform for Internet Standards (Internet.nl) actively promote. If the adoption of those standards doesn't proceed quickly enough – something of a structural problem with internet standards [1, 2] – the EU doesn't exclude the possibility of mandating them. Indeed, IPv6 is explicitly mentioned as a standard whose adoption may need to be enforced by law.

IPv6

In our 2018 IPv6 Inventory, we wrote at length about the lack of progress being made in the Netherlands' migration to IPv6 and the negative implications for the economy. It makes the Netherlands less attractive for initiatives with the Internet of Things (IoT) and tarnishes the country's image as a business-friendly innovation centre. End users behind (CG)NAT systems cannot run self-hosted applications and experience connection problems with peer-to-peer technology. Finally, the shortage of IPv4 addresses makes it difficult for existing providers to bring new large-scale services to market, and for market entrants to gain a foothold. Regrettably, as we reported in our latest update, the adoption of IPv6 has virtually come to a halt in the Netherlands. As a result, the country is falling still further behind its neighbours and the wider world, where IPv6 continues its advance. On a more positive note, SIDN Labs' most recent annual IPv6-only experiment found that a considerable portion of the global IPv6 infrastructure is now functioning well.

No interest in modern security standards?

In spring of this year, the Cyber Security Council came out with the recommendation that at least another 833 million euros should be invested in order to bring the security of the Dutch internet infrastructure up to scratch. In its advisory report to the Minister of Justice and Security, An Integrated Approach to Cyber-resilience, the Council identifies data breaches, ransomware and software vulnerabilities as the biggest threats to our open, free and prosperous society, alongside terrorism and espionage. The authors point out that, in terms of amounts invested in cyber-resilience, the Netherlands lags well behind other European countries. It was just a pity that the report didn't mention the importance of modern security standards.

Graph from an advisory report 'Integral approach to cyber resilience' of the Cyber Security Council

Similarly, the Guide to Cyber-security Measures published this summer by the National Cyber Security Centre (NCSC) neglected to highlight the value of internet security standards, despite their relevance.

Well, maybe some interest

This summer, the National Coordinator for Security and Counterterrorism (NCTV) published the Cyber Security Assessment Netherlands 2021, which did address the topic of technical standards. Indeed, the authors identified DNS, BGP, NTP (NTS) and TCP/IP as vital to the operational security of the internet and critical infrastructure. At about the same time, the intelligence services AIVD and MIVD published a brochure entitled Cyberaanvallen door statelijke actoren – zeven momenten om een aanval te stoppen ['Cyber Attacks by State Actors – Seven Opportunities to Stop an Attack'], which also highlighted the importance of security standards for thwarting state-sponsored attacks. The security services want to see SPF, DKIM and DMARC deployed in order to block mail from unknown sources. Although the AIVD and MIVD's advice was framed mainly with a view to stopping espionage and attacks on critical infrastructure, the relevance of their recommendations extends well beyond government organisations and large corporations. That much is clear from 2020's strong growth in phishing (via various channels, including e-mail) and bank phone number spoofing reported by the Dutch Banking Association (NVB) (see banking fraud help desk). There is ample scope for improving the security of e-mail in particular by deploying SPF, DKIM, DMARC and DANE.

Fraud figures of the National Banking Association for 2020

Upgrade your infrastructure

To sum up, although some Dutch government publications do highlight the importance of technical security standards, we feel that not enough is yet being done to drive adoption. Modern internet (security) standards, such as IPv6, DNSSEC, SPF/DKIM/DMARC and DANE, are nowadays widely supported by software and hardware. Yet their adoption is progressing agonisingly slowly, despite the abundant infrastructural benefits. "We entirely agree that the prompt adoption of modern internet standards is very important," says Gerben Klein Baltink, Chair of the Platform for Internet Standards. "And it's easy to periodically check whether your website, e-mail and local internet connection support the standards by visiting Internet.nl, the security site we run with SIDN's assistance."

"It's very important to get the adoption of modern internet standards moving, and we're committed to playing are part," confirms SIDN's CEO Roelof Meijer. "We use a variety of strategies to promote adoption: we offer financial incentives to .nl registrars to encourage them to deploy the standards for themselves and their customers, and we develop tools to help make implementation easier for businesses, government bodies and others. The toolbox we offer includes resources such as the Maturity Model for Modern Internet Standards and the E-mail Standards Checklist. We have also published a series of comprehensive hands-on guides that provide step-by-step advice on implementing DNSSEC signing and validation, SPF/DKIM/DMARC and DANE. Finally, we run the SIDN Academy, where our registrars can already access an e-learning module on e-mail security standards, and will soon be offered a module on IPv6." Today we're launching an entire new area on our website, where all the information and tools we offer to help with the implementation of IPv6, DNSSEC, SPF/DKIM/DMARC, DANE and other standards are conveniently arranged and presented. An extensive collection of FAQs on IPv6 will shortly be published there.