The .lu registry, managed by the Restena Foundation, supports the XFR-over-TLS technology to guarantee the authenticity and confidentiality of zone transfers to secondary servers. A pioneer in the field, the .lu registry conducted some integration tests on secure DNS zone transfers using TLS in collaboration with nic.at, the austrian registry for .at domain names.

Together, they tested the effective securing zone file transfer for .lu domain names to the secondary servers of nic.at's  RCodezero anycast service. The results confirmed the correct operation of softwares and the integration of RCodezero within the .lu technical infrastructure.

In the next year, the .lu registry intends to associate the XFR-over-TLS technology to anycast, a technology that it has already been using for many years to redundantly distribute the content of the .lu zone and to guarantee its availability all over the world.

This innovative association will ensure confidentiality for the .lu zone; and so that it is only transmitted to authorised service providers, but not only. This will also better protect the technical and commercial data concerning .lu domain name holders.

So that this new configuration can be effectively implemented and consequently can optimise the performance, the reliability and the security for the .lu zone distribution, the current partnerships for the provision of the anycast service are to be revised. Supporting the XFR-over-TLS technology will be et the forefront of the specifications.