.bank
 | |
| Introduced | November 26, 2014 (root zone) January 5, 2015 (delegated) |
|---|---|
| TLD type | Sponsored top-level domain |
| Status | Active |
| Registry | fTLD Registry Services |
| Sponsor | Bank Policy Institute American Bankers Association |
| Registration restrictions | Reserved for those in the banking sector; domain names must correspond to organization’s legal name or branding |
| Documents | Policies |
| Registry website | register |
.bank is a sponsored top-level domain used in the Domain Name System of the internet. The TLD was officially delegated to fTLD Registry Services on behalf of the Financial Services Roundtable and American Bankers Association on January 5, 2015.[1]
The top-level domain was approved by ICANN in September 2014, but only became available to qualifying institutions the following year in May 2015.[2] The .bank TLD has been included in the HSTS preload-list; as a result, popular web browsers will only connect to a .bank webpage using HTTPS.
Proposals
When proposed back in 2011, it was hoped that the release and adoption of a .bank domain name by authorized institutions would help prevent phishing and identity theft. The project's general manager, Craig Schwartz, anticipated less than 10,000 .bank domains being registered due to the exclusive eligibility criteria.[3]
Usage
Usage of the .bank domain is reserved for those in the banking industry, including retail banks, savings associations, and related holding companies and associated organizations composed primarily of those entities. If approved by the fTLD board, government regulators of eligible companies and organizations, or organizations whose members are composed primarily of such government regulators, can register as well.
Any entity in Canada found using a .bank gTLD in violation of the Bank Act must relinquish the domain.
As of March 2017, around 2,400 banks in the United States had registered nearly 5,000 .bank domains, with 300 in active use at that time.[2]
By August 2018, it was reported that several hundred banking institutions had acquired a .bank domain. Association with the domain is exclusive and subject to a vetting process, suggesting visitors can trust the website as being a legitimate bank.[4]
Security
As of 2017, institutions operating with a .bank domain were subject to enhanced security requirements, including:[2]
- Vetting process verified by Symantec and renewed biennially
- .bank TLD must be hosted on .bank name servers
- Registrations limited to approved registrars
- Usage of email authentication and two-factor authentication
References
- ^ "Delegation Report for .bank". IANA. Internet Assigned Numbers Authority. Retrieved September 9, 2022.
- ^ a b c "Considerations for Banks Thinking About Migrating to a Dot-Bank Domain Name". Community Banking Connections. 2017. Retrieved October 11, 2022.
- ^ "Would you trust a dot-bank site more than a dot-com?". The Register. October 10, 2011. Retrieved October 11, 2022.
- ^ "Banks are switching to 'dot-bank' websites — here's what that is". Bankrate. August 29, 2018. Retrieved October 11, 2022.