CIRA

Overview

CIRA (Canadian Internet Registration Authority) was founded in 1998 and is headquartered in Ottawa, Canada. It is the official registry operator for .ca, Canada's country-code top-level domain (ccTLD). As a non-profit organization, CIRA manages domain registration, DNS infrastructure operations, and domain policy development, forming the backbone of Canada's internet ecosystem.

As of 2026, .ca domain registrations exceed 3.4 million, making it one of the largest ccTLDs globally. Beyond domain registry operations, CIRA offers the free Canadian Shield DNS security service to protect Canadian users from malware and phishing attacks, as well as D-Zone DNS hosting for enterprise-grade managed DNS.

Key Strengths

• Authoritative .ca Registry: Operates over 3.4 million .ca domains as Canada's official domain registry. The Canadian Presence Requirements ensure only Canadian citizens, permanent residents, and organizations can register .ca domains, enhancing trust and local relevance for Canada-focused websites and brands.
• Free Canadian Shield DNS Security: A free DNS security service for Canadian residents and organizations, featuring built-in malware filtering and phishing site blocking. Three protection modes—Privacy, Malware Protection, and Family Protection (with adult content filtering)—provide zero-cost security enhancement for homes and businesses.
• DNSSEC Security Extensions: Full DNSSEC deployment across the .ca namespace prevents DNS cache poisoning and man-in-the-middle attacks. For financial, government, and high-security enterprise sites, DNSSEC is a critical trust foundation.
• Non-Profit Governance: CIRA operates on a not-for-profit basis, reinvesting domain registration revenue into Canadian internet infrastructure, cybersecurity research, and community grant programs. This structure ensures policy decisions prioritize long-term internet health over profit.
• D-Zone DNS Hosting: Enterprise-grade Anycast DNS hosting with automatic failover and DNSSEC signing management, offering organizations reliable and high-performance DNS resolution for their .ca domains.

Product Ecosystem

.ca Domain Registration Management

CIRA manages .ca domain registration, renewal, and transfer through its network of authorized registrars. Registrants must meet Canadian Presence Requirements—Canadian citizenship, permanent residency, or a registered Canadian organization. .ca supports both second-level domains (example.ca) and third-level provincial/regional domains (example.on.ca, example.qc.ca), a distinctive feature of the Canadian domain system.

Canadian Shield DNS Security

Canadian Shield is CIRA's free recursive DNS service for Canadian users, supporting DNS-over-TLS and DNS-over-HTTPS for encrypted queries. Three tiers are available: Privacy (unfiltered encrypted DNS), Malware Protection (blocks known malicious domains), and Family Protection (adds adult content filtering to malware protection). Users enable it by updating their router or device DNS settings to CIRA's server IPs.

D-Zone DNS Hosting

D-Zone is CIRA's Anycast DNS hosting solution for organizations, supporting secondary DNS, DNSSEC signing management, and traffic analytics reporting. It is suitable for organizations that want to manage their own DNS records while leveraging CIRA's global node infrastructure for reliability.

Limitations

• Restricted Registration Eligibility: .ca domains are limited to Canadian citizens, permanent residents, and Canadian-registered organizations. Foreign individuals and companies cannot directly hold .ca domains, adding compliance costs for multinationals operating in Canada.
• Limited International Reach: CIRA's brand and services are primarily recognized within Canada. Its influence in global domain governance is smaller than ICANN, Verisign (.com), or larger ccTLD operators. Non-Canadian users have virtually no use case.
• Non-Retail Model: CIRA does not sell domains directly to end users. Users must purchase .ca domains through authorized registrars, meaning pricing, promotions, and renewal costs vary significantly between providers.
• Relatively Narrow Product Scope: Compared to Verisign (operating .com/.net with extensive security services) or CNNIC (combining registry with internet research), CIRA's product portfolio centers primarily on .ca domains and Canadian Shield.

Use Cases

• Canadian Local Businesses (★★★★★): Corporate websites and e-commerce platforms targeting Canadian consumers. A .ca domain boosts local trust and improves rankings on google.ca.
• Canadian Government & Education (★★★★★): Government agencies, schools, and non-profits using .ca to demonstrate official status and local authenticity, while meeting Canadian Presence Requirements.
• Canadian Personal Brands (★★★★★): Personal websites, blogs, and portfolios for Canadian residents. A .ca domain serves as a Canadian digital identity marker.
• Foreign Businesses in Canada (★★★★): Multinationals with a Canadian entity registering .ca domains for local marketing, though registration must go through a Canadian subsidiary or representative office.

Pricing

.ca domain pricing is set by each authorized registrar. Typical ranges in Canadian dollars:

Note: CIRA sets wholesale price caps; retail prices are set by individual registrars. Compare prices across multiple registrars.

FAQ

• Can non-Canadians register a .ca domain? No. Canadian Presence Requirements mandate that registrants must be Canadian citizens, permanent residents, or Canadian-registered organizations. Alternative options include registering through a Canadian subsidiary or using .com/.net instead. ccTLD domain selection strategy

• Does Canadian Shield conflict with a VPN? Canadian Shield operates at the DNS level and does not conflict with VPNs. However, if you use a VPN that routes DNS queries through the VPN tunnel, the Shield's filtering effectiveness depends on DNS configuration. Manually set your DNS to Canadian Shield server addresses for maximum protection coverage. DNSSEC and DNS security guide

• Does CIRA offer WHOIS privacy? .ca WHOIS data is publicly accessible by default. CIRA provides a WHOIS data publication policy where individual registrants can have their personal information protected through Privacy services, but organization and business information typically remains public. Check your registrar for specific privacy options. WHOIS privacy setup

• How do I verify Canadian identity for .ca registration? Registrars handle identity verification during registration. Accepted documents include Canadian passport, driver's license, provincial health card, or a Canadian business registration number (Corporation Number or Business Number). CIRA does not directly process personal identification. Domain purchase guide