A critical security issue in the Xen virtualization software will become public on Tuesday, November 22nd 2016. The Xen team has already informed Gandi of the necessary patches.

Following this announcement, we have pre-emptively deployed the patches required to correct the issue. We have been monitoring the particular security flaw, and have determined that we will need to stop/start certain Xen VMs in order to assure that no further attack vector remains.

We will be contacting the affected customers by email in order to allow them to sufficiently prepare for this stop/start. Those of you who do not receive any message from us about needing to stop and start your VM are therefore unaffected.


 In order to minimize downtime and the impact in general, we advise all affected customers to perform a stop/start of their platforms sometime between now and November 22, 2016.

Warning: a simple "reboot" of the concerned servers is not enough. They must be stopped and started in order to apply the security measures.

Any affected VMs that you have not yet been stopped and started prior to the maintenance will be automatically stopped and started by us on November 22 at 3:00 AM PST (11:00 UTC). Please expect around 30 minutes of downtime per stop/start.

As always, if you have any questions or need of assistance, please do not hesitate to contact our Customer care team.


1. All about DPML Plus

2. Half-price .org domains

3. Events at Gandi

3. Events outside Gandi

5. Recently-delegated TLDs

6. TLD release calendar

7. Promo roundup

Have you been paying attention?

This month has been full of distractions (though let's not go there). But relax. We're hear to catch you up on what you may have missed at Gandi.

Let's start with a new, limited-time option from Donuts for new gTLDs called DPML Plus. We'll guide you through what regular old DPML is and then see what's changing and what the Plus is for.

Then we'll stop off at .org for an excellent promo that just got going.

After that, in case you missed it, we'll give you a rundown on what we've been up to. We've been busy this past month and this coming one, both inside our offices and outside.

And then we'll see what ICANN's been up to, at least in terms of delegating new strings, with this month's Recently-delegated TLDs update.

And as always, we'll peek at the TLD release calendar and then round up this month's promos.

Anyway, we know it's so easy for things to slip by when you're not watching. That's why we're summing it all up here.

Changes to Donuts's DPML protection

While it may be of general interest to just about anyone, Donuts's DPML protection program is mostly of interest to those who own trademarks and want to protect them across new TLDs. If that's you and you didn't catch our rundown of the changes to the program, we suggest looking into it. At least before the end of the year when things really change.

What it is and what changed | Back to top

Half-price .org domains

Another time-sensitive bit of news that we wouldn't want you to miss this month is that .org domains are currently half-price on the first year of registration. Take a look at our full promo roundup below and you'll notice that most of them are new TLDs. It's pretty rare to see such a significant promo on an old standby like .org. And this one's only good for first 5,000 domains created and only goes until the end of the year, so get them while they're still hot.

Get a half-price .org while you can | Back to top

Events at Gandi

We've had a busy month across our various offices. Here's just a few things we've been up to.

Kernel Recipes

Kernel Recipes
Running from September 28 through 30 in Paris, Gandi helped sponsor Kernel Recipes, consisting of three days of about 20 talks (plus "lightning" talks). If the name doesn't make it obvious, Kernel Recipes largely revolves around discussions of open source, especially kernel.org.

For photos, videos, and more for this year's event, check them out on the Kernel Recipes site.

Since 2013, we've been sponsoring the open source messaging project CaliOpen as one of our premier sponsored projects. This past month, CaliOpen announced that they'd secured financing from BPIFrance.

If you don't yet know of CaliOpen, it's an open source project to make secure electronic communication of all forms easy. For details, check out CaliOpen's site.

On the US side of things, we've opened our doors up to Holberton School, a project-based, peer learning programming school. We're devoting a portion of our office space in SoMA in San Francisco as a co-working space and we've been glad to see them stopping by.

You can find out more about Holberton School on their website.

Or read the press release or even this cio.com article or more information on the help we're providing.

See photos and videos from Kernel Recipes 2016 | Check out CaliOpen (in French) | Find out more about Holberton School | Back to top

Events outside Gandi

M3AAWG Paris
From October 24 through October 27 members of our abuse team based in Paris (they mitigate abuse, not deal it out, in case you were wondering) attended M3AAWG, the Messaging Malware Anti-Abuse Working Group. M3AAWG is a critical part of developing best practices for combating online spam, fraud, and malware online
We're happy to be able to participate in M3AAWG meetings and just as previous meetings have taken place right in our neighborhood in San Francisco, this time our home city of Paris was selected, which is convenient for us.

ICANN Hyderabad
We've been covering a lot of ICANN-related news lately, and maybe that was in part out of anticipation for ICANN57.


ICANN57 just wrapped up in Hyderabad and according to some changes in the structure and rhythm of ICANN meetings approved back in 2014, ICANN57 was a little longer than ICANN56, lasting a full seven days, with two public forum sessions. As of two ICANN sessions ago that's now the norm.

While, admittedly, a great depth of material isn't available, a good starting point for anyone who missed ICANN57 but are curious about the meeting is ICANN's blog.

Otherwise, we also use this meeting as a chance to meet face-to-face with many of our partners up and down the domain name food chain, and it was of course great to have that opportunity as well. With .blog launching this month, the registry held a big launch party which was about as lit as a TLD release party an get.

As for future events, as the year comes to a close and the winter Federal holiday season approaches, we don't expect a lot of upcoming events. However, keep on eye on our meet up page for The Root Zone, our periodic DNS-themed meet up we coordinate with CloudFlare.

M3AAWG | ICANN Blog | Back to top

Recently-Delegated TLDs


While battles for this month's batch of newly delegated TLDs are long over, in case you missed them, this past month's recently-delegated new TLDs post focuses on the question of who is better suited to be awarded the contract for a new gTLD: an organization or company already closely associated with the TLD or a large "portfolio" registry?

Find out how this month's TLDs answer that question | Back to top

TLD release Calendar

Not many TLDs will be or have already been released this month, but there are a few. In particular, we wanted to highlight .blog, entering the GoLive phase November 21. This is a great opportunity to do some one-stop shopping by getting a .blog and attaching it to a Simple Hosting instance with one-click Wordpress installation (see our guide for more information)


Tuesday November 8:

.makeup (GoLive)

Monday November 21:

.blog (GoLive)

Wednesday November 27:

.娱乐 (.xn--fjq720a "entertainment") (GoLive)
(.xn--vhquv "company") (GoLive)
(.xn--czrs0t "shop") (GoLive)
(.xn--unup4y "games") (GoLive)


November 2016
Sun Mon Tue Wed Thu Fri Sat



.makeup (GoLive)




.blog (GoLive)

.娱乐 .企业 .商店 .游戏  (GoLive)



Stay tuned for updates!

Back to top

Promo Roundup

Yeehaww! We're rounding up a whole herd of promos this month (including that .org one we mentioned above) in this month's Promo Roundup. Catch up with the full roundup below:

Promos this month

Only in November:

.top creations $1.00 and renewals half-price
.club renewals reduced-price
.me just $5.00

.eu half-price

Starting November 1:

.org half-price through December 31 -- first 5,000 domains only!

Starting November 7:

.markets, .trading 75% off first year through February 12 

Starting November 8:

.shop creation for $9.99 until January 31

Ending November 30:

.design $10.00 through November 30
.link $4.50 through November 30
.photo $5.00
through November 30
.audio, .hiphop, .guitars $9.03, $12.84 , and $16.22 through November 30

Ongoing promotions:

.cat $5.00 through January 11
.live, .studio, .video half-price through December 31
.desi half-price through December 31
$7.99 per year in GoLive through December 31

.stream $2.00 per year in GoLive
.accountant, .bid, .cricket, .date, .download, .faith, .loan, .party, .racing, .review, .science, .trade, .webcam, .win $2.00 per year through December 31
.online, .press, .website, .site, .host, .space, .pw, .tech on promo through December 31
.tech, .online, .site renewals 50% off through December 31
 .xyz $3.99 per year through December 31
.black, .blue, .pink, .red, .lgbt, .kim, .shiksha, .poker, .pro, .info, .mobi, .移动 50% off until December 31 (previously June 30)
.gdn $1.50 until until December 31

Back to top

With plenty out there to distract this month, we wouldn't be surprised if you missed a few of the things we talked about above. We hope you've caught up now. But did we miss something? Or maybe you just miss us and need someone to talk to. Either way, tweet us @gandibar, email us at feedback@gandi.net, on Facebook, G+, or contact us on the #gandi channel on Freenode. \o/



It doesn't matter if they're buying sneakers or smart phones or if they're doing it online or in person. Even people who eschew all technology in favor of a face-to-face, personal shopping experience have shifted their expectations. While in the old days, shoppers wanted to make their transactions and get out, now increasingly in the age of internet commerce, customers are looking for an interaction. That is, shopping is now a relationship.

And we have good news for anyone looking to set up .shop online and start that relationship. Starting November 8, 2016 until January 31, 2017, create your .shop domain for just $9.99 per year (normally $45.95 per year at A rates)*.

Get your .shop?



*Prices in USD. Please visit the .shop pricing page to shop in your local currency.

Want this look?

First, start off with the brows. We're using a repeating black and gray textured image.

Next, for our foundation we're using a grey with just a slight hint of yellow in it, with some bright white concealer. No blending.

And then, of course, we do some contouring with a big bright GoLive phase. And now, as of November 8, 2016, top off this look or any other with a .makeup domain. L'Oréal's .makeup TLD is now in the GoLive phase and as such is open to all and available for $250.61 per year at A rates*.

Get this look? Register your .makeup:


*Prices in USD. See .makeup pricing page for local prices.

When we checked in on the new gTLD program in June, we mentioned very briefly a "control mechanism" called DPML which has been, for some time now, implemented by Donuts. In particular, we noted how successful this program has been and speculated that we may see such mechanisms applied across-the-board by ICANN, especially when the next round of new gTLD applications opens.

But for now, Donuts is still fine-tuning this feature and making adjustments and changes as it goes along. That's especially the case when it comes to pricing.

As of January 1, 2017, prices for their DPML service, which Donuts is now calling "Legacy DPML" are doubling. At the same time, for a limited time, they are now offering an enhanced, "upgrade" under the name DPML Plus.

About DPML

We need to back up a little bit, though, to talk about what exactly this feature is. DPML stands for Domains Protected Marks List. Donuts, the registry with the largest new gTLD portfolio out there, since the beginning of 2014 has been letting trademark owners leverage their large portfolio to protect their brand names against cybersquatters on all TLDs for which they are responsible. Donuts TLD portfolio is now at almost 200 TLDs. Instead of having to defensively register terms, which can entail rapidly ballooning costs (there are now over a thousand active new gTLDs), DPML customers pay less and get protection across Donuts's entire portfolio.

To purchase the service, trademark owners first submit a request to Trademark Clearinghouse (TMCH). Then, using the SMD file received from TMCH, they can request a "block" on a protected term. A blocked domain, then, simply cannot be registered and will not have DNS resolution. In effect, it's the same outcome that most people want with a defensive registration, but with no actual domain name registration involved and hence a lower cost associated.

If you purchase a DPML block, you can protect your trademark or related terms for a period of five to ten years with the option to renew annually after that.

If a trademark holder attempts to register a domain only to find it blocked, if they have the SMD file for an applicable TMCH claim, they can then request a DPML Override.

If you would like to know all the details, Donuts has a complete overview of the service available on their site.


In addition to raising the price on this "legacy" service, from October 1 through December 31, Donuts is offering a special promotion on DPML Plus, the new, enhanced versione. DPML Plus will only be available during the three-month promotion period. In the meantime, they have ceased invoicing override fees.

DPML Plus will include a few tempting new enhancements that are not part of the "legacy" service and will not be available for blocks purchased after the new year. These enhancements include:

  • Domain blocks will start at an initial 10 years
  • Block not only the TMCH-registered term but also three additional terms (such as spelling variations or related terms) across all TLDs managed by Donuts
  • Extended protection over all new gTLDs managed by Donuts whether "classic" or "premium" (the "legacy" service does not include premiums)
  • Unlimited overrides without additional fees
  • Block an override requested by another TMCH holder of an identical term
  • Optional add-on to block three more terms for an added fee

Any current DPML registration is eligible for a discounted upgrade to DPML Plus. Otherwise anyone wishing to renew the "legacy" service before the price increase on January 1st can do so before December 31.

As always, feel free to contact us if you have any questions about this and especially if you'd like to sign up for the DPML Plus service. We also recommend taking a look at the information published by Donuts on their site.

One common concern about the new gTLD program is the difficulty and expense of protecting intellectual property from domain squatters. With DPML and the new DPML Plus products, Donuts offers one more cost-conscious solution. We'll be interested to watch this service and how ICANN may incorporate some of its features into the new gTLD program as a whole in the coming months and years.

After a flood of Brand TLDs delegated and in September very few TLDs delegated, ICANN is back to adding strings to the root zone at a steady clip with three generic TLDs added this month.

The three generic TLDs delegated this month pose the question: Who is the best steward of a TLD closely associated with real world organizations?

The application process and final delegation results for .radio, .basketball, and .baseball provide an answer to this question. But not without some messy fights between some of the respective applicants.


.radioOctober 12

There were four applicants for .radio, three of which—BRS Media Inc. (registry for .am and .fm), Donuts (who submitted a PIC) and Afilias—submitted a standard application while the fourth, the European Broadcasting Union (or EBU) submitted a Community Priority Application.

If you're familiar with the Eurovision contest, then you're at least passingly familiar with EBU (in fact, they also applied for .eurovision as a Brand TLD). Besides that, they are an international association composed largely of national, government-sponsored or government-run broadcasters. Their application was additionally supported by the World Broadcasting Unions (WBU) and the Association Mondiale des Radiodiffuseurs Communautaires (AMARC) as well as a number of other amateur and professional radio organizations.

Because EBU submitted their application for this domain as a Community Priority Application, ICANN considered their application first, before any of the standard applications were considered. For obvious reasons, the companies who had submitted their applications as standard applications opposed EBU's community application. BRS Media attacked EBU with particular vehemence.

Community Priority Applications are evaluated by a panel of ICANN-appointed but independent experts who score applications on numerous criteria with a total possible score of 16. A minimum score of 14 is required to pass, and EBU's application barely cleared this hurdle.

The specific objections to the decision came down to the question of whether EBU should represent the "radio community." BRS Media in particular vocally complained that ICANN's decision would create a narrow definition of the radio community. They also asserted EBU had a conflict of interest for having joined ICANN's GAC (Government Advisory Committee) as an observer. BRS, along with Affilias and other standard applicants, filed a request for independent review of the ICANN board's final decision, which was flatly denied and ultimately withdrawn.

With the delegation of .radio, EBU plans to set up a World .Radio Advisory Board to define policies on accepting domain applicants, with preference being given to broadcast radio stations and then internet radio.

.basketballOctober 19

Next up, .basketball was delegated to FIBA (Fédération Internationale de Basketball Amateur), the international basketball organization responsible for, among other things, establishing the rules of the sport, appointing referees and establishing control for international competition such as in the Olympics.

In their application, FIBA partnered with ROAR Domains, a New Zealand based company that also supported the International Rugby Board in its .rugby application.

Among FIBA's competition for .basketball was Donuts, the "portfolio" registry co-founded by current CEO Paul Stahura, also founder of the registrar eNom and winner of the 2012 Domainer of the year award. ROAR attempted to wield this reputation against Donuts, telling Donuts that they would seek Donuts's disqualification not just for .baskteball but as a registry

Donuts, of course, is now the registry for nearly 200 TLDs comprising almost 2 million domains.

However, .basketball is not one of them.

.baseballOctober 30

A final entry in this month's study of who makes the most appropriate steward of a TLD focused on a specific group or topic is .baseball. There were two applicants for this TLD: Donuts (under the guise of Silver Pass LLC), and MLB Advanced Media DH, LLC, which is a partnership of Major League Baseball team owners for the purposes of running MLB-branded internet and "interactive" media, including MLB's website and the websites of each of the individual teams.

This was the least contentious of the three TLDs we're covering this month, but with this we'll point out that .baseball's technical backend will notably not be handled by MLB Advanced Media itself but Neustar, a well-established registry.

Likewise, .basketball's technical backend will be managed by CentralNic, another established registry founded in 1995. The technical backend for .radio, however will be handled by Knipp Medien und Kommunikation GmbH, a small registrar and more recently registry based in Germany.

The point though, is that the question of whether each of these TLDs should be managed by a company or organization close to the existing industry or activity represented by that TLD is largely irrelevant on a technical level. Where it matters is in deciding who should be the one to market the new TLD to the niche market covered by it.

In many cases, ICANN has entrusted so-called portfolio registries to market extensions as they see fit. In these three delegated this month, ICANN has accepted applications, in some cases despite occasionally significant contention, from groups associated with the meaning of the TLD itself.

These examples don't necessarily prove that one model is better than any other, but as .radio, .basketball, and .baseball enter the market, we'll see whether these decisions were good for marketing these TLDs.

Keep an eye on this page as well as ICANN's delegated strings page for updates and remember:

Just because we've featured a TLD in this feature doesn't mean Gandi will be offering it any time soon. We don't know yet how they'll be rolled out to the market, so we can't say for sure whether we'll be offering them at Gandi. We'll try our best, though.

Buy low and sell high. If that's you're mantra, then now is a great time for playing the .markets market or for trading in .trading.

Why? Well, we don't necessarily encourage domain name trading, but the market on .market and .trading is looking good. We're predicting good returns on your investments in both TLDs during Q4 2016 and Q1 2017 because from November 7 through February 12, these two extensions are 75% off for the first year. That means that a .markets domain, normally $82.45 will be $20.62 for the first year (full price after that) and a .trading domain, normally $102.97 will be $25.75 for the first year (full price beyond that).

So now's the time to buy. Especially if you're feeling bullish.

Register a domain under one of these TLDs?:


*Prices in USD. See .markets or .trading for full price listing.

Generally, we like to be able to bring you news about TLD prices going down, at least temporarily, but every so often we have a duty to inform you of price increases on certain TLDs.

This time around it's two German geographic TLDs—.berlin and .hamburg—who are seeing price increases on domain creation, renewal and transfers.

As of November 1, .berlin creations have already increased from $52.18 to $64.18 per year at A rates*. As for .berlin renewals and transfers, these will also go up to $64.18 at A rates from the current $52.18 per year*, but not until March 1, 2017. Since you can register a .berlin domain for a total of 10 years, now's the time to renew it for as long as you can to save money in the long term.

As for .hamburg, on January 1, 2017, it will also see the creation price increase to $64.18 per year at A rates*. Between now and the new year is the time to get that .hamburg domain you always wanted, then.

Renewal and transfers rates on .hamburg will also increase to $64.18 per year at A rates on March 1, 2017, along with .berlin, so renew your .hamburg's for up to 10 years too.

Renew your .berlin or .hamburg domain now:

Register a .hamburg domain before the price increase:


*Prices in USD. See .berlin and .hamburg pricing pages for local prices.

As of November 2 at 8:00 AM PDT, the .doctor is in. And you can schedule your appointment (i.e. your domain name) right away.

Now that .doctor is in the GoLive phase, .doctor domains are available for $116.59 per year* at A rates. That means .doctor is open to all kinds of doctors: medical doctors, doctors of philosophy, love doctors, you name it.

So get your .doctor today. No insurance required.

Register a .doctor?



*Prices in USD. See the .doctor pricing page for local prices.

Here's a little gift for any organization coming online this winter: from now until December 31, 2016 at 3:00 PM PST, new .org domains will be half price on the first year. That means the first year will be just $8.60 instead of the usual $17.20*.

But get them while you can: only the first 5,000 domains created will be able to benefit from this special pricing, so register your .org domain as soon as possible.

Register a .org?


*Prices in USD. Please see .org for local pricing.

Page   1 2 395 96 97
Change the news ticker size