diff --git a/src/registrar/forms/application_wizard.py b/src/registrar/forms/application_wizard.py index b5dc782ff..c861c8627 100644 --- a/src/registrar/forms/application_wizard.py +++ b/src/registrar/forms/application_wizard.py @@ -135,6 +135,9 @@ class AnythingElseForm(forms.Form): widget=forms.Textarea() ) +class RequirementsForm(forms.Form): + agree_check = forms.BooleanField(label="I read and agree to the .gov domain requirements.") + # List of forms in our wizard. Each entry is a tuple of a name and a form # subclass FORMS = [ @@ -148,6 +151,7 @@ FORMS = [ ("other_contacts", OtherContactsForm), ("security_email", SecurityEmailForm), ("anything_else", AnythingElseForm), + ("requirements", RequirementsForm), ] # Dict to match up the right template with the right step. Keys here must @@ -163,6 +167,7 @@ TEMPLATES = { "other_contacts": "application_other_contacts.html", "security_email": "application_security_email.html", "anything_else": "application_anything_else.html", + "requirements": "application_requirements.html", } # We need to pass our page titles as context to the templates, indexed @@ -178,6 +183,7 @@ TITLES = { "other_contacts": "Other contacts for your domain", "security_email": "Security email for public use", "anything_else": "Anything else we should know?", + "requirements": "Requirements for registration and operation of .gov domains", } diff --git a/src/registrar/templates/application_requirements.html b/src/registrar/templates/application_requirements.html new file mode 100644 index 000000000..f5f41a877 --- /dev/null +++ b/src/registrar/templates/application_requirements.html @@ -0,0 +1,72 @@ + +{% extends 'application_form.html' %} +{% load widget_tweaks %} + +{% block form_content %} + +
The .gov domain exists to support a broad diversity of government missions and public initiatives. Generally, the .gov registry does not review or audit how government organizations use their domains.
+ +However, misuse of an individual .gov domain can reflect upon the integrity of the entire .gov space. There are categories of misuse that are statutorily prohibited or abusive in nature.
+ +A .gov domain must not be used for commercial purposes, such as advertising benefitting private individuals or entities.
+ +A .gov domain must not be used for political campaigns.
+ +A .gov domain must not be used to distribute or promote material whose distribution violates applicable law.
+ +.gov is a trusted and safe space. .gov domains must not distribute malware, host open redirects, or otherwise engage in malicious cyber activity.
+ + +As a .gov domain registrant, maintain current and accurate contact information in the .gov registrar. We strongly recommend that you create and use a security contact.
+ +Registrants should respond in a timely manner to communications about required and prohibited activities.
+ + +The .gov program may need to suspend or terminate a domain registration for violations. Registrants should respond in a timely manner to communications about prohibited activities.
+When we discover a violation, we will make reasonable efforts to contact a registrant, including: +
We understand the critical importance of the availability of .gov domains. Suspending or terminating a .gov domain is reserved only for prolonged, unresolved serious violations where the registrant is non-responsive. We will make extensive efforts to contact registrants and to identify potential solutions, and will make reasonable accommodations for remediation timelines proportional to the severity of the issue.
+ + +The .gov program will preload all newly registered .gov domains for HTTP Strict Transport Security (HSTS).
+HSTS is a simple and widely-supported standard that protects visitors by ensuring that their browsers always connect to a website over HTTPS. HSTS removes the need to redirect users from http:// to https:// URLs. (This redirection is a security risk that HSTS eliminates.)
+HSTS preloading impacts web traffic only. Once a domain is on the HSTS preload list, modern web browsers will enforce HTTPS connections for all websites hosted on the .gov domain. Users will not be able to click through warnings to reach a site. Non-web uses of .gov (email, VPN, APIs, etc.) are not affected.
+ + +