Skip to main content
Resources

新闻发布：ICANN 第 50 次召集安全专家维护互联网的安全

自 2010 年以来定期举行的密钥签名仪式确保了互联网地址簿的正常运行。

本页面还提供其他语种：

加利福尼亚州洛杉矶——2023 年 7 月 12 日——互联网名称与数字地址分配机构 (Internet Corporation for Assigned Names and Numbers, ICANN) 将于 2023 年 7 月 19 日在其位于洛杉矶的设施内举行第 50 次密钥签名仪式。密钥签名仪式是一项重要的运营活动，对于 ICANN 如何确保互联网域名系统 (Domain Name System, DNS) 的安全是至关重要的。ICANN 的密钥签名仪式提供了一层关键保障，确保互联网的基础设施维持安全并为所有人提供服务。

"ICANN 自 2010 年以来一直在举行密钥签名仪式，"ICANN 的互联号码分配机构 (IANA) 服务副总裁兼公共技术标识符 (Public Technical Identifiers, PTI) 总裁金·戴维斯 (Kim Davies) 表示。"举行这些仪式对于 DNS 的持续运行至关重要。特别是在疫情爆发期间，互联网的使用经历了爆炸性的增长，而我们从不间断地负责管理 DNS 根区的成绩为互联网奠定了坚实的基础。"

DNS 是互联网的地址簿。全世界有超过 53 亿人每天使用它来浏览互联网。用户不必为访问每个网站或应用程序输入复杂的数字定位（即互联网协议地址），而是可以使用如 icann.org 这样直观的域名来浏览互联网、发送电子邮件等等。

DNS 在最高层级上使用"根区密钥签名密钥"作为其真实性验证印章。这通常被简单地称为根密钥或根"KSK"。全世界的计算机都可以通过检查这一真实性验证印章是否存在、且未被篡改，以此来证实系统是否正常运行。每隔三个月，在密钥签名仪式中，我们需要将该印章应用到日常操作中的其他密钥上，使得该系统正常运行。如需了解更多信息，请阅读《互联网密钥和密钥签名仪式：阐释》一文。

如果没有密钥签名仪式和它所启用的域名系统安全扩展 (Domain Name System Security Extensions, DNSSEC) 技术，DNS 的安全性就会降低，且互联网用户将更易受到各种形式的安全攻击。这些仪式采用公开透明的方式进行，ICANN 鼓励所有感兴趣的利益相关方参与这些活动，这对 ICANN 维护 DNS 的安全和稳定是至关重要的。

媒体资源

根 KSK 仪式第 50 场：直播、文稿和其他资料

参加一场 KSK 仪式：https://www.iana.org/help/key-ceremony-attendance

ICANN 简介

ICANN 的使命在于确保全球互联网的稳定、安全与统一。要在互联网上访问另一个人的信息，您必须在电脑或其他设备中键入一个地址——可以是一个名称或是一串数字。这个地址必须是独一无二的，只有这样电脑之间才能互相识别。ICANN 负责协调这些分布在世界各地的唯一标识符并提供相应支持。ICANN 是一个非营利性公益机构，成立于 1998 年，其社群的参与者遍布世界各地。

媒体联系人

亚历山大·丹斯 (Alexandra Dans)
美洲地区传播主管
乌拉圭蒙得维的亚
+598 95 831 442
alexandra.dans@icann.org
或 press@icann.org

A note about our terms of service:

We have updated our electronic terms of service to provide greater transparency and align with laws applicable to us. Learn more.

This site uses cookies to deliver an efficient user experience and to help us see how the site is used. Learn more.OK

Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as""icann.org"" is not an IDN."