Domain Restrictions
Registration Policy Notice:
Registrars are required to display a notice to registrants stating the use restrictions for .day.
Sample text:
.day is a restricted domain space in which all domains must be used for action generation or online content creation flows. .day domains must be active within 100 days from the registration date. Domain names that do not comply with these requirements may be placed on ServerHold or deleted for non-compliance.
.day is an encrypted-by-default TLD by virtue of being inscribed in the HSTS Preload list. As such, all second-level domains under .day will only load on modern browsers if a valid SSL certificate has been configured and the web server is serving HTTPS. This behavior of .day must be clarified to registrants. A respective notification must be integrated as part of the registration flow and presented prior to purchase. It cannot be embedded in other terms of service, nor require the registrant to follow a link to obtain the information. You may use the following sample text of the registry for the notice. On demand of the registry, the reseller will have to provide screenshots of the purchase flow including the notice. You have to confirm that you have understood and will comply to these requirements by transmitting the parameter X-ACCEPT-SSL-REQUIREMENT = 1.
Sample text:
.day is a more secure domain, meaning that HTTPS is required for all .day websites. You can buy your .day domain name now, but in order for it to work properly in browsers you must first configure HTTPS serving. For more information about configuring HTTPS, including resources to obtain an SSL certificate, please visit [link to registrar page on SSL, or Let’s Encrypt]. [Follow by registrar option to add certificate to cart.]
Please note: The SSL requirement is enforced at the browser level, so there is no mandated order of purchase. The HSTS Preload list, to which .day is inscribed, only forces encryption on HTTPS connections, thus, .day domain names that do not have an SSL certificate configured may still be used for other services like e-mail and non-browser based uses such as defensive registrations.