Gov Internet Program Guidelines

This overview of Gov Internet domain registration requirements is meant to further explain and clarify some sections of the Federal Policy about registering second-level Gov Internet domains. The Federal Policy on Gov Internet domains focuses on purpose and jurisdiction.

The Gov Internet domain facilitates collaboration among government-to-government, government-to-business, and government-to-citizen entities. The domain hosts only official, government sites at the federal-, state- and local-government levels, including federally recognized Indian tribes, known as Native Sovereign Nations (NSNs). The Gov Internet domain provides the official and trusted Internet presence for these government entities.

Every Gov Internet domain name application is carefully examined to ensure domain names requested will not create misunderstandings about the purpose of domains and their Web site content. GSA arbitrates domain name issues and reserves the right to deny domain name requests that do not adequately meet requirements.

The Gov Internet domain operates in accordance with the Interagency Management Council for Telecommunications. The policies and guidelines construct have been developed through communications with Federal, State and Local government groups to provide the most effective management of the government web presence.

For further assistance with domain names and eligibility requirements, please refer to http://www.dotgov.gov/help_qualify.aspx or call the Help Desk toll free at (877) 734-4688 or locally at (703) 306-6740.

Guidelines for All Second Level Gov Internet Domains

The following applies to all Gov Internet domains:


1. No non-Government Advertisements: A Gov Internet domain may not be used to advertise for private individuals, firms, or corporations, or imply in any manner that the government endorses or favors any specific commercial product, commodity, or service.

2. No Political or Campaign Information: The Gov domain is for the operation of government, not the political, political party, or campaign environment. No campaigning can be done using Gov Internet domains. The Gov Internet domain websites may not be directly linked to or refer to websites created or operated by a campaign or any campaign entity or committee. No political sites or party names or acronyms can be used. Separate webites and e-mail on other top-level domains (TLDs), such as .org, will have to be used for political activity.

3. Naming Conventions: Naming-convention rules are described in detail in the Federal Policy (41 CFR 102-173). Thousands of names, programs, and general terms are used in Gov Internet domains. The following is a summary of naming-convention rules:

1. No General Domain Names: General terms alone such as "licenses," "recreation," and "benefits" are not allowed because they do not represent a specific enough origin and service. However, a domain name such as "MarylandRecreation.gov" is allowed (assuming that domain is authorized by either Maryland's Chief Information Officer or the Governor of Maryland).

2. State Postal Codes: All state and local second-level, Gov Internet domains must include the two-letter state acronym or spell out the state name. Additional naming conventions apply for local entities, such as cities, towns, counties, territories, and parishes.

4. Two-Year Eligibility Period: All Gov Internet domains are registered for a 2-year eligibility period. During this 2-year period, a review of eligibility and administrative information is required. If necessary, the Gov Internet Registrar will contact the points of contact (POCs) for domains. Please keep POC information up to date. The Gov Internet Registrar may request an updated authorization letter, updated Domain Name Server (DNS) information, or other information. This information enables the government to ensure Gov Internet domains provide secure, official Web sites and promotes the best possible service to the general public.

5. Link Change Notification: When a link on a Gov Internet domain makes the user leave a Gov Internet website, a notification or screen (i.e., a splash message) should alert users that they are leaving the official Gov Internet page.

6. Privacy and Use Policy: Domains should adhere to appropriate level of policies in referenece to personal information usage for their domain.

7. Domain Suspension: Organizations that operate Web sites that are not in compliance with the Gov Internet conditions of use may have their domain name suspended or experience operational issues or terminated based on the severity of the issue. There are two levels of incidents:

1. Critical - Content restriction on the Gov Internet Domain does not allow criminal activities or obscene images, inappropriate sexually oriented material or material being accessed through a Gov domain URL could result in an expedient suspension. A process for resolution with escalation procedures is in place with the RRA. The RRA will contact the registratin points of contacts and the Authorizing Authority (AA) advising them of an imminent domain suspension. The AA is the CIO for Federal level domains. The Authorizing Authority (AA), for State and Local governments and Native Soverign Nations is the highest elected official that authorizes the domain to operate and contain information reference to their government responsibilities.

2. Administrative - Domains that have content with advertising materials, political or campaign information, substantial incorrect information, inappropriate web links (i.e. to sites that violate content policy), and incorrect redirects are not in compliance or not consistent with original intent or approved purpose. The domain POCs will be contacted by the RRA to get issues resolved. The expectation is these administrative compliance issues are handled in a timely manner and suspension is reserved as a last resort.

   The actual suspension of a domain without concurrence of a registrant requires the internal GSA approval at the Senior Executive level. Generally, for GSA initiated suspesions, the suspension will become effective 3 hours to 24 hours after notification of the points of contacts (POCs), depending on the severity of the issue. The notification of the contacts is the time at which one of the URL points of contact is contacted or the time that the voice and email messages are sent to all contacts, which ever is first. This provides an opportunity for the registrant to remediate the issue to avoid suspension. The RRA will review the site to see if the policy violation has been remediated prior to the suspension.

8. Account Information: It is the registrant's responsibility to provide all requested information and keep all account information current, which includes POC information and DNS information. It is the registrant's responsibility to ensure the account is paid in full each year. Government domains / websites can be very large, complex, and support important business operations. The process to address policy violations will allow for coordination across organizational boundaries and involve persons with the authority to make decisions on the appropriate course of action and in the timeframe required. The Administrative POC is the person who controls the content of the domain and is the manager of the operations of the domain. The Technical POC is the person that operates the DNS and takes care of the technical operations such as security patches. The Billing POC is the person that pays for the domain. The Authorizing Authority (AA) is the highest elected official that authorizes the domain to operate and contain information reference to their government responsibilities. The AA for Federal Agency domains is the CIO. The AA for State level domains is the Governor or their appointed CIO. The AA for local governments and Native Sovereign Nations is the highest elected official.

9. Security: Security Incident notification procedures:

1. The RRA shall notifiy the US-CERT of all incidents involving the intentional unauthorized access or unauthorized intentional damage to, modification, destruction of a Gov Internet domain. The Administrative POC will be notified and involved to assist in the US-CERT investigation and report.

2. Information received about incidents described above shall be considered confidential and shall not be disclosed to the public.




Federally Sponsored Domain Guidelines

The following applies only to federal Gov Internet domains:


1. CIO Authorization: All Federal Agency domain requests must come from the Chief Information Officer of the Federal Agency. See www.cio.gov for a complete list of federal-agency CIOs. (Note: This link will open a new browser window and leave this site.)

2. Section 508 Compliance: All Federal Agency websites must be in compliance with Section 508 of the Rehabilitation Act. (Note: This link will open a new browser window and leave this site.)

3. Congressional Domain Requests: All legislative requests from the Legislative Branch (Congress) of the Federal Government for second-level Gov Internet domains will go through the Senate Office of Information Resources or the House Information Resource Office prior to registering on the Gov Internet domain.

4. Federal Court Domain Requests: All federal court Gov Internet domains are linked to uscourts.gov and authorized by the Office of Government wide Policy. See http://app.comm.uscourts.gov/. (Note: This link will open a new browser window and leave this site.)

5. NSN Domain Requests: All Native Sovereign Nations domains are coordinated with the following Chief Information Officer representative:

Ms. Nita Pitts
Department of the Interior
Bureau of Indian Affairs
Office of the Chief Information Officer
Corporate Oaks Bldg, Room 2548
1849 C. Street NW
Washington, DC 20240-0001
(703) 735-4113 (phone)
(703) 735-4023 (fax)




State-Sponsored Domain Guidelines

1. CIO or Governor Authorization: Governors or the governor-appointed state chief information officers must sign authorization letters for all state domain requests. To verify the identity of your state CIO, refer to www.nascio.org. (Note: This link will open a new browser window and leave this site.)

2. State Name or Postal Code: To register any second-level Gov Internet domain, state governments must register either the full state name or clearly indicate the state postal code at the beginning or end of the domain name. Use of a hyphen is recommended but optional. Examples of state domain names are the following:

1. Tenneseeanytime.gov
2. Ne-taxes.gov
3. Mysc.gov
4. Nmparks.gov



3. There will be no obscure State names or postal codes: Use of the state postal code should not be embedded within a single word in a way that obscures the postal code. For example, "Information.gov" for Indiana (IN) or "Forests.gov" for Oregon (OR) are unacceptable. See the following paragraph in the Federal Policy for more about this rule: §102-173.50.

   Valid examples are the following:
1. UtahGovernor.gov
2. ColoradoDOT.gov
3. NJRecycling.gov
4. FloridaHealthDepartments.gov



4. Unlimited State-Level Domains: The state CIO and governor can register an unlimited number of second-level Gov Internet domains (e.g., Georgia.gov, GA.gov, MyGeorgia.gov, NewGeorgia.gov, etc.).

5. State Courts/State Legislatures: State courts and legislatures request authorization from their state CIO or governor and follow the state's Internet policy, in addition to Gov Internet Domain Registration Federal Policy.

6. Utility, Transportation, and Regional Authorities: These entities request authorization from their state CIO or governor who will ensure they are instruments of the State.




Local Government Sponsored Domain Guidelines

1. As of March 2003, local governments are authorized to get second-level Gov Internet domains.

2. AA (Mayor or Elected Official Authorization): The authorization letter must be signed by the mayor or the highest-ranking, elected official because the domain is the Internet presence for the entire city, town, county, township, borough, or parish it names.

3. Utility, Transportation, and Regional Authorities: These entities request authorization from their AA, Mayor, or highest ranking official who will ensure they are instruments of the State.

4. Naming Conventions: Naming conventions are described in depth in the following parts of the published policy: §102-173.55 - § 102-173.60. The rules for local-government domains are the following:

1. The preferred format is "CityName-StatePostalCode.gov":

Example: Tyler-tx.gov or TylerTX.gov




2. County government names will contain the spelled-out word "County" or "Parish" in the name. See the following for more information: §102-173.60.

3. The words "City of" or "Town of" are optional (e.g., CityofAlbany-OR.gov)

5. Abbreviations: Abbreviations are not authorized unless an exception to the domain name is granted through the RRA and the DPA.

6. Exception Requests: The DPA will arbitrate all exceptions to policy 41 CFR 102-173 for naming convention. The RRA will determine domain holder eligibility.

7. Ready / Green Local Level Domain Names: In order to support the Federal and State Government Ready and Green Program initiatives, local governments can register both prefixes to their already registered domain name.

1. Examples:

ReadyHoustonTX.gov or GreenHoustonTX.gov

ReadyAugustaME.gov or GreenAugustaME.gov

ReadyKansasCityMO.gov or GreenKansasCityMO.gov

ReadyDadeCountyFL.gov or GreenDadeCountyFL.gov