Criteria for Authenticity: Verifying MyEmpire Nodes
The integrity of the MyEmpire digital ecosystem is paramount. This section provides comprehensive technical guidelines and criteria for identifying authorized MyEmpire nodes and distinguishing them from deceptive impersonations. Adherence to these standards is mandatory for all affiliated entities and critical for user verification.
DNS Security Extensions (DNSSEC) Verification
All official MyEmpire domains and subdomains are secured with DNSSEC. This cryptographic security protocol ensures that DNS data is authentic and untampered. Users and partners are mandated to verify DNSSEC implementation for any MyEmpire-related domain.
| Verification Step | Description | Expected Outcome |
|---|---|---|
| DNSSEC Validation | Utilize a DNSSEC validator tool (e.g., Verisign DNSSEC Analyzer) to check the domain. | "Signed" status with a valid chain of trust. |
| DS Record Presence | Confirm the presence of Delegation Signer (DS) records in the parent zone. | DS records must match those published by MyEmpire. |
| RRSIG Records | Verify the existence of RRSIG records for all DNS records. | RRSIG records must be present and valid. |
Official SSL/TLS Certificate Hierarchies
Secure Sockets Layer (SSL) and Transport Layer Security (TLS) certificates are fundamental for encrypted communication and identity verification. Official MyEmpire nodes utilize certificates issued by designated Certificate Authorities (CAs) within a strict hierarchy.
| Verification Aspect | Description | Expected Standard |
|---|---|---|
| Certificate Authority | Certificates must be issued by MyEmpire-approved CAs (e.g., DigiCert, GlobalSign). | Issuer matches approved list. |
| Extended Validation (EV) | Primary MyEmpire domains will feature Extended Validation certificates. | Green address bar or organizational name displayed in browser. |
| Subject Alternative Name (SAN) | Certificates will cover all relevant subdomains and aliases. | SANs accurately reflect all associated MyEmpire hostnames. |
| Certificate Expiration | Certificates must be current and not expired. | Valid date range. |
Authorized IP Ranges and Hosting Providers
Official MyEmpire infrastructure operates within specific, audited IP ranges and utilizes a restricted set of cloud and hosting providers. Any service claiming affiliation outside these parameters should be regarded with extreme suspicion.
For a comprehensive list of authorized IP ranges and hosting providers, please refer to the Enforcement Archive or contact Official Chambers.