HKIRC Announces .hk DNS Security Extensions (DNSSEC) Signed

 To further our commitment to foster a safe internet environment 

Hong Kong, 31 May 2017 – Hong Kong Internet Registration Corporation Limited (HKIRC) today announced the signing of DNS Security Extensions (DNSSEC) for .hk and.香港 domain name. The DNSSEC-signed .hk was enabled at the Internet’s root which hugely improves the security and integrity of Internet communications and transaction data records. 

The successful deployment of DNSSEC and the setup of the chain of trust with root mean HKIRC is embarking on DNS data validation with trusted data source at the top of the Domain Name Systems (DNS) for .hk. Once DNS data is digitally signed with DNSSEC, the authenticity can be validated such that any modification on domain name data records will be detected. With DNSSEC, the identifier of Internet domains can be further secured to protect business and end users transacting on .hk domain names. 

“Hong Kong as the global financial hub is prone to cyber security concerns, especially for businesses in today’s connected world. Therefore, the secure administration of domain name infrastructure is crucial to the Internet community,” said Mr Leo Lam, Chief Executive Officer of HKIRC. “With the signing of DNSSEC for the .hk , we expect to see more collaboration within the Internet community to embrace the technology for better Internet security.” 

HKIRC’s signing of DNSSEC was supported by ICANN. Dr Richard Lamb, Senior Program Manager of DNSSEC, commented, “The security of .hk domain infrastructure is enhanced as a result of the enablement of DNSSEC at root zone, which helps promote a stable and interoperable environment for both local and global Internet communities.” 

HKIRC, the administrator for .hk domain names, has always put Internet security and service availability as our top priority for our community. The regular replacement of DNSSEC keys will be done annually. This will ensure a secure DNS standard supporting the secure transfer of online data.   

The deployment of DNSSEC is now a reality for .hk. We would like to call for collaboration with domain registrars and Internet stakeholders in Hong Kong to include DNSSEC deployment in their development schedule. By working together, we could further our commitment to foster a safe Internet environment on a secured DNS for .hk — a core part of Internet’s global addressing system in the internet world.