North Shore Bank of Commerce 
A New Look And A New Website Address: northshore.bank
Derek Rowan, IT Manager
1/23/2018
After several exciting months of development, North Shore Bank is delighted to announce our move to .BANK. The bank’s new .BANK domain is a more secure address reserved exclusively for banks. The new northshore.bank address provides robust security and meets strict verification requirements that will reduce the risk of cyber threats and enable us to build a high-trust, more secure environment for our customers.
Why .bank?
We take the security of our customer’s information very seriously. It was a natural step to move to a .BANK domain as it is reserved exclusively for banks and provides additional layers of security that other top level domains such as .com do not.
Why is .bank more secure?
.BANK domains signify that a financial institution has been verified as legitimate and is committed to implementing the additional and mandatory security requirements that go beyond existing standards. Only verified banks are allowed to use a .BANK domain. Therefore, when you see a domain which ends in .BANK, you can be assured that you are dealing with a legitimate, verified financial institution.
What are the enhanced security requirements in .BANK?
fTLD requires compliance with a set of requirements that are not currently mandated by the operators of other commercially available gTLDs, including:
- Mandatory Verification of Charter/Licensure for Regulated Entities ensures that only legitimate members of the global banking community are awarded domain names.
- Mandatory Re-verification of Registration Data every two years or at domain renewal, whichever comes first, ensures ongoing eligibility for domain names.
- Domain Name System Security Extensions (DNSSEC) ensures that Internet users are landing on participants’ actual websites and not being misdirected to malicious ones. fTLD will require that all domain levels, from fTLD as the top-level registry operator to your entity as the registrant, utilize DNSSEC for domains that resolve on the Internet.
- Email Authentication to mitigate spoofing, phishing and other malicious activities propagated through emails to unsuspecting users.
- Multi-Factor Authentication to ensure that any change to registration data is made only by authorized users of the registered entity.
- Enhanced Encryption to ensure security of communication over the Internet to prevent eavesdropping, data tampering, etc.
- Prohibition of Proxy/Privacy Registration Services to ensure full disclosure of domain registration information so bad actors cannot hide.