Recent from talks
Nothing was collected or created yet.
Domain name registrar
View on WikipediaA domain name registrar is a company, person, or office that manages the reservation of Internet domain names.
A domain name registrar must be accredited by a generic top-level domain (gTLD) registry or a country code top-level domain (ccTLD) registry. A registrar operates in accordance with the guidelines of the designated domain name registries. As of March 2024, there are 2,800 domain name registrars accredited by ICANN.[1]
History
[edit]
Creation
[edit]The need for a central authority to assign or administer domain names emerged from collaboration among computer network pioneers as they created the Domain Name System in the 1980s. In a 1982 draft Request for Comments (RFC), editor Jonathan Postel proposed a "czar of domains." In her revisions of the draft, Jake Feinler crossed out "czar" and introduced the term "registrar." She designated the DOD Network Information Center, of which she was the head, as the registrar of top-level domains.[2][3]
This draft was published as RFC 819. The RFC standardized the naming system for computers on the internet, creating domain names.[4] It specifies that "associated with each domain there is a single person (or office) called the registrar."[5]
The earliest domain names were names of organizations, such as .arpa for the Advanced Research Projects Agency. Feinler switched to a system of naming by generic categories, creating .mil, .gov, .org, .edu, and .com as generic top-level domain.[6] This existed alongside a system of country code top-level domains administered by Postel. Eventually the role of registrar for each of the TLDs was delegated to various universities (the University of Dortmund for .de, Kuwait University for .kw, etc.) and, via US government contracts, to private companies.[3]
Commercialization
[edit]As the internet expanded in the early 1990s, becoming more commercial and international, the US government decided it could no longer provide domain name management free of charge.[3]
From 1991 to 1999, Network Solutions Inc. (NSI) operated the registries for the .com, .net, and .org top-level domains (TLDs). In addition to the function of domain name registry operator, it was also the sole registrar for these domains. However, several companies had developed independent registrar services. In 1996, one such company, Ivan Pope's company, NetNames, developed the concept of a standalone commercial domain name registration service that would sell domain registration and other associated services to the public, effectively establishing the retail arm of an industry with the registries being the wholesalers.[citation needed] NSI assimilated this model, which ultimately led to the separation of registry and registrar functions.[citation needed]
In 1997, PGMedia filed an antitrust suit against NSI citing the DNS root zone as an essential facility, and the US National Science Foundation (NSF) was joined as a defendant in this action.[7] Ultimately, NSI was granted immunity from antitrust litigation, but the litigation created enough pressure to restructure the domain name market.
In October 1998, following pressure from the growing domain name registration business and other interested parties, NSI's agreement with the United States Department of Commerce was amended.[8] This amendment required the creation of a shared registration system that supported multiple registrars. This system officially commenced service on November 30, 1999, under the supervision of the Internet Corporation for Assigned Names and Numbers (ICANN), although there had been several testbed registrars using the system since March 11, 1999. Approximately 2,800 registrars are accredited by ICANN as of 31 March 2024.[1]
Of the registrars who initially entered the market, many have continued to grow and outpace rivals. GoDaddy is the largest registrar managing over 50M .com domains.[9] Other widely used registrars include Tucows (who acquired Enom), Namecheap[9] and Webcentral. Registrars who initially led the market but later were surpassed by rivals include Network Solutions and Dotster [citation needed]. Domain name registration is frequently offered in conjunction with web development services, and as a result, software-as-a-service (SaaS) website builders such as Squarespace and Wix.com are among the top domain name registrars worldwide.[10][9]
Each ICANN-accredited registrar must pay a fee of US$4,000 plus a variable fee.[11] As of The sum of annual registrar fees are estimated to total US$10.4 million for 2025 financial year[1] The competition created by the shared registration system enables end users to choose from many registrars offering a range of related services at varying prices.
Designated registrar
[edit]This section needs additional citations for verification. (April 2025) |
Domain registration information and accreditation is maintained by the domain name registries, which contract with domain registrars to provide registration services to the public.[12] Domain name registrars are organizations that allow individuals or entities (registrants) to register a domain name.[13] An end user selects a registrar to provide the registration service, and that registrar becomes the designated registrar for the domain purchased by the user, also referred to as the Registered Name Holder.[14]
Only the designated registrar may modify or delete information about domain names in a central registry database.[15] It is not unusual for a registered name holder to switch registrars, invoking a domain transfer process between the registrars involved, that is which is governed by domain name transfer policies established by the affiliated registry and ICANN.[16]
When a registrar registers a .com domain name for an end-user, it must pay a maximum annual fee of US$9.59 and for .net the maximum price for one year is set at $9.92 [17] to VeriSign, the registry operator for .com, and a US$0.18 annual administration fee to ICANN. Between 2012 and 2021, the U.S. government set a price cap on the wholesale cost of .com domain registrations at $7.85 per year. Since then, the wholesale cost has increased marginally on an annual basis.[18]
Registrars may offer registration through third party resellers who may not be ICANN-accredited registrars.[19] An end-user either registers directly with a registrar, or indirectly through one or more layers of resellers. As of 2023, the retail cost generally ranges from a low of about $9.70 per year to about $35 per year for a simple .com domain registration, although registrars often discount the price for a registration when ordered with other products such as web hosting services.[20] The price for other gTLD registrations or renewals can vary.
The maximum period of registration for a gTLD domain name is 10 years.[21] Some registrars offer longer periods of up to 100 years, but such offers involve the registrar renewing the registration for their customer every 10 years by themselves. If the registrar is de-accredited or goes out of business the domain name will be transferred to another accredited registrar. The full 100 year registration on such a transferred domain may not apply due to ICANN having a maximum of ten years for a registration [citation needed].
DNS hosting
[edit]Registration of a domain name establishes a set of name server records in the DNS servers of the parent domain, indicating the IP addresses[22] of DNS servers that are authoritative for the domain. This provides a reference for direct queries of domain data.
Registration of a domain does not automatically imply the provision of DNS services for the registered domain. Most registrars do offer DNS hosting as an optional free service for domains registered through them. If DNS services are not offered, or the end-user opts out, the end-user is responsible for procuring or self-hosting DNS services. Registrars require the specification of usually at least two name servers.
DNSSEC support
[edit]This section needs additional citations for verification. (June 2024) |
The Domain Name System Security Extensions (DNSSEC) is a suite of Internet Engineering Task Force (IETF) specifications for securing certain kinds of information provided by the Domain Name System. This involves a registrar processing public key data and creating DS records for addition into the parent zone. All new GTLD registries and registrars must support DNSSEC.
Domain name transfer
[edit]A domain name transfer is the process of changing the designated registrar of a domain name. ICANN has defined a Policy on Transfer of Registrations between Registrars.[23] The usual process of a domain name transfer is:
- The end user verifies that the WHOIS or Registration Data Access Protocol (RDAP) admin contact info is correct, particularly the email address; obtains the authentication code (EPP transfer code) from the old registrar, and removes any domain lock that has been placed on the registration. If the WHOIS or RDAP information had been out of date and is now updated, the end-user should wait 12–24 hours before proceeding further, to allow time for the updated data to propagate. Admin contact info for RDAP can be obtained by using Registration Data Directory Services (RDDS) such as ICANN Lookup.
- The end user contacts the new registrar with the wish to transfer the domain name to their service, and supplies the authentication code.
- The gaining Registrar must obtain express authorization from either the Registered Name Holder or the Administrative Contact. A transfer may only proceed if confirmation of the transfer is received by the gaining Registrar from one of these contacts. The authorization must be made via a valid Standardized Form of Authorization, which may be sent e.g. by e-mail to the e-mail addresses listed in the WHOIS or RDAP. The Registered Name Holder or the Administrative Contact must confirm the transfer. The new registrar starts electronically the transfer of the domain with the help of the authentication code (auth code).
- The old registrar will contact the end user to confirm the authenticity of this request. The end user may have to take further action with the old registrar, such as returning to the online management tools, to re-iterate their desire to proceed, in order to expedite the transfer.
- The old registrar will release authority to the new registrar.
- The new registrar will notify the end user of transfer completion. The new registrar may have automatically copied over the domain server information, and everything on the website will continue to work as before. Otherwise, the domain server information will need to be updated with the new registrar.
After this process, the new registrar is the domain name's designated registrar. The process may take about five days. In some cases, the old registrar may intentionally delay the transfer as long as allowable. After transfer, the domain cannot be transferred again for 60 days, except back to the previous registrar. At the ICANN 82 meeting in March 2025, this 60-day transfer lock policy was eliminated, replaced with a 30-day lock period for new registrations or transfers, effective following implementation within 18 months.[24][25]
If an attempt is made to transfer a domain immediately before it expires, a transfer can in some cases take up to 14 days, meaning that the transfer may not complete before the registration expires. This could result in loss of the domain name registration and failure of the transfer. To avoid this, end users could either transfer well before the expiration date, or renew the registration before attempting the transfer.[26]
If a domain registration expires, irrespective of the reason, it can be difficult, expensive, or impossible for the original owner to get it back. After the expiration date, the domain status often passes through several management phases, often for a period of months; usually it does not simply become generally available.[27]
Transfer scams
[edit]The introduction of a shared registry system opened up the previous domain registration monopoly to new entities known as registrars, which were qualified by ICANN to do business. Many registrars had to compete with each other, and although some companies offered value added services or used viral marketing, others, such as VeriSign and the Domain Registry of America attempted to trick customers to switch from their current registrar using a practice known as domain slamming.
Many of these transfer scams involve a notice sent in the mail, fax, or e-mail. Some scammers contact end-users by telephone (because the contact information is available through WHOIS or Registration Data Directory Services for RDAP) to obtain more information. These notices would include information publicly available from the WHOIS or RDAP database to add to the look of authenticity. The text would include legalese to confuse the end user into thinking that it is an official binding notice. Scam registrars go after domain names that are expiring soon or have recently expired. Domain name expiry dates are readily available via WHOIS or RDAP.
End-users can use domain privacy services which redact contact information and change it with ones provided by the services.
Drop catcher
[edit]A drop catcher is a domain name registrar that offers the service of attempting to quickly register a given domain name for a customer if that name becomes available—that is, to "catch" a "dropped" name—when the domain name's registration expires and is then deleted, either because the registrant abandons the domain or because the registrant did not renew the registration prior to deletion.[citation needed]
Registrar rankings
[edit]Several organizations post market-share-ranked lists of domain name registrars and numbers of domains registered at each. The published lists differ in which top-level domains (TLDs) they use; in the frequency of updates; and in whether their basic data is absolute numbers provided by registries, or daily changes derived from zone files.
The lists appear to all use at most 16 publicly available generic TLDs (gTLDs) that existed as of December 2009, plus .us. A February 2010 ICANN zone file access concept paper[22] explains that most country code TLD (ccTLD) registries stopped providing zone files in 2003, citing abuse.
Published rankings and reports include:
- Monthly (but with approximately a three-month delay), ICANN posts registry reports created by the registries of all gTLDs.[28] These reports list total numbers of domains registered with each ICANN-accredited registrar, the numbers transferred, renewed and deleted in the period covered by the report.
- Yearly (but covering only the period from 2002 to 2007), DomainTools.com, operated by Name Intelligence, Inc., published registrar statistics. Totals included .com, .net, .org, .info, .biz and .us. It cited "daily changes" (presumably from daily zone files) as the basis for its yearly aggregates.
ICANN registrar accreditation
[edit]ICANN registrar accreditation is a process established by the Internet Corporation for Assigned Names and Numbers (ICANN) to ensure that gTLD domain registrars meet specific standards and requirements in providing gTLD domain registration services to domain registrants. The country code ccTLDs typically have their own registrar accreditation processes.
To become an ICANN-accredited domain registrar,[29] companies must undergo a comprehensive and rigorous application process, including a third-party background check and criminal history screening.
The application fee for ICANN Accreditation as of April 12, 2021, is $3,500[30] which is non-refundable and post successful accreditation the annual fee is $4,000. In addition, registrars are required to provide documentation confirming that they possess access to a minimum working capital of $70,000 at the time of application.
See also
[edit]References
[edit]- ^ a b c "Internet Corporation for Assigned Names and Numbers (ICANN) FY25 Budget" (PDF). ICANN. Archived (PDF) from the original on 3 September 2024. Retrieved 24 April 2025.
- ^ Postel, Jonathan; Su, Zaw-Sing. "The Naming Convention for Internet User Applications" (5/31/1982). The NIC Collection, Box: NIC-N&AD-Box#1, File: X3578.2006-ARC/NIC/NSAA/N&A/E&C/Jan-Jun-82. Mountain View, California: Computer History Museum.
- ^ a b c Gade, Eric (May 2011). Naming the Net: The Domain Name System, 1983-1990 (MA/MSc thesis). Columbia University and the London School of Economics.
- ^ Robachevsky, Andrei (November 26, 2013). "Happy 30th Birthday, DNS!". Internet Society. Archived from the original on April 1, 2023. Retrieved June 25, 2024.
- ^ Postel, Jonathan; Su, Zaw-Sing (August 1982). The Domain Naming Convention for Internet User Applications (Report). IETF. RFC 819.
- ^ Feinler, Elizabeth (2011). "Host Tables, Top-Level Domain Names, and the Origin of Dot Com". IEEE Annals of the History of Computing. 33 (3). IEEE: 74–79. Bibcode:2011IAHC...33c..74F. doi:10.1109/MAHC.2011.58.
- ^ Clausing, Jeri (19 September 1997) "National Science Foundation Is Added to Suit on Domain Names". The New York Times. Retrieved on 2013-02-08.
- ^ "Registrar Accreditation: History of the Shared Registry System Archived 2012-04-19 at the Wayback Machine". ICANN. Retrieved on 2013-02-08.
- ^ a b c Allemann, Andrew (2024-11-14). "Top 25 domain name registrars". Domain Name Wire | Domain Name News. Archived from the original on 2024-11-14. Retrieved 2025-04-24.
- ^ "Registrar Stats: Top Domain Registrars - DomainState.com". 2025-03-27. Archived from the original on 2025-03-27. Retrieved 2025-04-25.
{{cite web}}: CS1 maint: bot: original URL status unknown (link) - ^ "2013 Registrar Accreditation Agreement". ICANN. Archived from the original on 2017-06-07. Retrieved 2017-06-06.
- ^ "Welcome Accredited Registrars". Internet Corporation for Assigned Names and Numbers (ICANN). 2020-01-01. Retrieved 2025-08-23.
- ^ "Registrar". ICANN. Retrieved 24 April 2025.
- ^ "Registered Name Holder Definition: 111 Samples". Law Insider. Retrieved 2025-04-24.
- ^ DOMAIN NAMES – DISCUSSION PAPER Challenges and good practices from registrars and registries to prevent the misuse of domain names for IP infringement activities (PDF). EUIPO. 2021. ISBN 978-92-9156-287-9. Retrieved 24 April 2025.
{{cite book}}:|website=ignored (help) - ^ "Transfer Policy". ICANN. 21 February 2024. Retrieved 24 April 2025.
- ^ "Verisign Announces Increase in .com/.net Domain Name Fees (NASDAQ:VRSN)". VeriSign, Inc. - Investor Relations (Press release). July 14, 2011. Archived from the original on 2012-09-11. Retrieved 2013-02-08.
- ^ Allemann, Andrew (2024-08-20). "How domain registrars have increased .com prices". Domain Name Wire | Domain Name News. Archived from the original on 2025-03-29. Retrieved 2025-04-24.
- ^ "About Resellers". ICAAN. Archived from the original on 2025-04-27. Retrieved April 24, 2025.
- ^ Allemann, Andrew (2025-03-26). "Why do registrars sell .com domains for less than the wholesale price?". Domain Name Wire | Domain Name News. Archived from the original on 2025-04-01. Retrieved 2025-04-24.
- ^ "General Questions". ICANN. Archived from the original on 2025-04-20. Retrieved April 24, 2025.
- ^ a b "Zone file access concept paper" (PDF). ICANN. 18 February 2010. Archived (PDF) from the original on Dec 15, 2011.
- ^ "Policy on Transfer of Registrations between Registrars". ICANN. 15 March 2009. Archived from the original on 26 January 2012. Retrieved 24 April 2009.
- ^ "ICANN to Eliminate 60-Day Domain Transfer Lock in Major Policy Shift". HostDean. 2025-03-17. Retrieved 2025-03-17.
- ^ Murphy, Kevin (2025-03-13). "ICANN to kill off 60-day domain transfer lock - Domain Incite". Domain Incite - Domain Name Industry News, Analysis & Opinion. Retrieved 2025-03-17.
- ^ My domain expired! what do I do? Archived 2007-10-22 at the Wayback Machine. dyndns.com
- ^ Life Cycle of a Typical gTLD Domain Name Archived 2011-03-15 at the Wayback Machine. ICANN. Retrieved on 2013-02-08.
- ^ "Monthly Registry Reports". ICANN. Retrieved 30 December 2020.
- ^ [1] Archived 2023-07-14 at the Wayback Machine. How to Become a Registrar. Source ICANN | Retrieved on 2023-07-14.
- ^ "Instructions for Completing the Registrar Accreditation Application - ICANN". www.icann.org.
External links
[edit]Domain name registrar
View on GrokipediaFundamentals
Definition and Role
A domain name registrar is an accredited organization authorized by the Internet Corporation for Assigned Names and Numbers (ICANN) to register domain names on behalf of users in specific top-level domains (TLDs), such as generic TLDs like .com or country-code TLDs like .uk.[1] These entities provide the primary interface for individuals and businesses seeking to secure unique domain names, enabling the reservation of identifiers that translate human-readable addresses into IP addresses via the Domain Name System (DNS).[2] In the DNS hierarchy, registrars serve as intermediaries between domain owners (registrants) and domain registries, which operate the authoritative databases for TLDs.[1] They handle essential tasks such as initial reservations, renewals, transfers, and basic administrative updates, ensuring that domain registrations are processed and propagated accurately to the registry for global DNS resolution.[2] ICANN oversees this process through its accreditation framework to maintain stability and competition in the domain market.[1] Key responsibilities of registrars include collecting registration fees from registrants and remitting them to registries, maintaining accurate and up-to-date registrant contact data, which is accessible via the Registration Data Access Protocol (RDAP) with privacy redactions applied to personal information, and ensuring compliance with ICANN's consensus policies, such as those governing transfers and dispute resolution.[5] They must also verify registrant information to prevent abuse and provide clear terms of service outlining rights and obligations.[13] Registrars differ from domain registries, which manage the zone files and infrastructure for entire TLDs without direct interaction with end-users, and from resellers, which are third-party entities operating under an accredited registrar's sponsorship to offer registration services but lacking direct ICANN accreditation.[1][14] This structure promotes a competitive ecosystem where registrars and resellers handle customer-facing operations, while registries focus on backend TLD maintenance.[2]Operational Framework
Domain name registrars facilitate the registration process through a structured interaction with users and registry operators. The process starts when a user selects a desired domain name and engages an accredited registrar to handle the transaction. The registrar performs an availability check by querying the relevant registry operator's database using the Extensible Provisioning Protocol (EPP), an XML-based standard for provisioning domain objects. If the domain is available, the registrar submits a create command via EPP, including required registrant details such as name, postal address, email, and phone number. Upon validation and acceptance by the registry, the registration is confirmed, and the domain is reserved for the specified period, typically one to ten years.[2] Following registration, registrars integrate the new domain into the Domain Name System (DNS) by updating name server records. This involves sending an EPP update command to the registry to specify the authoritative name servers (NS records) for the domain, along with any necessary glue records for delegation. The registry then incorporates these details into its top-level domain (TLD) zone file and distributes the updated zone to its authoritative name servers. Changes propagate hierarchically from the root zone through TLD servers to recursive resolvers worldwide, with caching governed by time-to-live (TTL) values; while updates can appear quickly, full global propagation often occurs within 48 hours due to varying cache expiration times. Registrars handle a diverse array of TLDs to meet varied user needs. They support generic TLDs (gTLDs) such as .com and .org under ICANN oversight, country-code TLDs (ccTLDs) like .uk or .ca through separate agreements with national or territorial registries, and the expanded set of new gTLDs resulting from ICANN's 2012 New gTLD Program, which delegated over 1,200 additional extensions including .app and .shop. ICANN accreditation primarily covers gTLD operations, enabling registrars to interface with multiple registries via standardized protocols like EPP, while ccTLD participation requires compliance with each country's specific policies.[15][16][17][18] To streamline operations, especially for high-volume users, registrars employ automated systems including web-based consoles for interactive management and application programming interfaces (APIs) layered over EPP for programmatic access. These tools enable bulk operations such as simultaneous availability checks, registrations, renewals, or name server updates across numerous domains, reducing manual effort and supporting resellers or enterprises. For instance, EPP-based SDKs provided by registries like Verisign allow developers to integrate these functions into custom applications for efficient scaling.[19]Historical Development
Origins in the DNS System
The Domain Name System (DNS) was invented by Paul Mockapetris in 1983 while working at the University of Southern California's Information Sciences Institute (ISI), with the first implementation and deployment occurring between 1984 and 1985.[20][21] This hierarchical, distributed database replaced the centralized hosts.txt file used on ARPANET, enabling scalable name-to-address mappings across the growing network.[22] Early domain management fell under the purview of Jon Postel, who informally established and led the Internet Assigned Numbers Authority (IANA) starting in the early 1970s and formally directed it from ISI, personally overseeing the allocation of domain names, IP addresses, and other protocol parameters.[23][21] In its initial non-commercial phase during the mid-1980s, domain registration operated through a decentralized yet coordinated model primarily involving research institutions and universities, which served as de facto registrars for top-level domains (TLDs) like .edu, .com, .org, and .gov.[24] Requests for domain names were submitted via simple email to the Network Information Center (NIC) at SRI International or directly to Postel at IANA, who vetted submissions for technical feasibility and uniqueness before manual entry into the DNS database.[25][24] This process supported the ARPA-Internet community, with universities often managing subdomains under .edu (e.g., mit.edu) and early .com registrations limited to research-affiliated commercial entities, reflecting the academic and governmental focus of the pre-commercial internet.[26] TLD structures were outlined in RFC 920 (1984), which defined categories like .edu for educational institutions and emphasized delegation to responsible sub-administrators to ensure robust, distributed name resolution.[24] Through the early 1990s, this model evolved under U.S. government oversight as internet usage expanded beyond research networks. In 1991, the Defense Information Systems Agency (DISA) subcontracted Network Solutions, Inc. (NSI) to handle domain registrations, marking the transition from ad hoc academic management.[27] By late 1992, the National Science Foundation (NSF) assumed responsibility for non-military internet infrastructure and awarded NSI a cooperative agreement effective January 1, 1993, granting it a monopoly on registering generic TLDs such as .com, .net, and .org on a first-come, first-served basis.[27][28] A pivotal event was the formation of the Internet Network Information Center (InterNIC) in 1993, a collaborative effort led by NSF with NSI providing centralized registration services, AT&T handling database functions, and General Magic supporting information services, thereby standardizing domain management amid rapid growth.[27][29] This arrangement persisted until 1998, when NSI's exclusive role began to liberalize under emerging international coordination.[27]Commercialization and Growth
The commercialization of domain name registration began with the U.S. Department of Commerce's 1998 White Paper, "Management of Internet Names and Addresses," which outlined a plan to transition the Domain Name System (DNS) from government oversight to a private, competitive framework, ultimately leading to the formation of the Internet Corporation for Assigned Names and Numbers (ICANN) and ending Network Solutions' monopoly on generic top-level domain (gTLD) registrations.[30][31] This policy shift emphasized competition, private-sector management, and global participation to foster innovation and reduce costs in domain services.[32] In 1999, ICANN introduced competitive registration through the Shared Registration System (SRS), enabling multiple accredited registrars to register domains in key gTLDs such as .com, .net, and .org, thereby dismantling the single-provider model and spurring market entry by new entities.[33][34] This development marked the onset of a profit-driven industry, where registrars competed on pricing, services, and customer support to capture growing demand for online presence. The sector experienced significant expansion, with the number of ICANN-accredited registrars growing from 159 in late 2000 to over 2,000 by 2025, largely propelled by ICANN's 2012 New gTLD Program, which delegated more than 1,200 additional top-level domains to diversify options beyond traditional gTLDs and stimulate registrar innovation.[35][36][17] This proliferation not only increased domain availability but also boosted overall registrations, reflecting the internet's maturation into a global commercial infrastructure. Globalization further accelerated growth by encouraging the rise of international registrars and the liberalization of country-code top-level domains (ccTLDs), such as the 2014 introduction of direct .uk registrations by Nominet, which expanded access beyond subdomains like .co.uk and invited broader competition from worldwide providers.[37][38] These changes facilitated cross-border operations, supported by advancements in internationalized domain names (IDNs), enabling registrars to serve diverse linguistic markets and enhancing the industry's worldwide footprint.[39]Regulation and Accreditation
ICANN Accreditation Requirements
To become an ICANN-accredited domain name registrar, organizations must undergo a formal application process that evaluates their operational readiness and compliance commitment. Applicants submit a detailed form to ICANN, including business plans, organizational structure, and evidence of technical infrastructure capable of handling domain registrations, such as secure systems for data management and EPP (Extensible Provisioning Protocol) connectivity to registries.[40] Financial stability is demonstrated through proof of at least US$70,000 in liquid working capital, often via a certified bank letter or an irrevocable letter of credit from a recognized institution to cover potential operational risks.[40] Upon review and approval, applicants sign the Registrar Accreditation Agreement (RAA), a legally binding contract outlining rights and duties, which grants access to the Shared Registration System for gTLD registrations.[41] Accredited registrars face ongoing core obligations under the RAA to ensure system integrity and user protection. They must maintain data escrow deposits with approved agents, providing daily or weekly electronic copies of registration data in a specified format to enable recovery in case of failure or termination, as coordinated by ICANN.[42] Registrars are required to adhere to the Uniform Domain-Name Dispute-Resolution Policy (UDRP), promptly implementing decisions by locking domains, verifying complainant details, and transferring or canceling names as ordered without undue delay.[42] Additionally, they submit an annual compliance certificate to ICANN within 20 days of each calendar year's end, affirming adherence to RAA terms, including fee payments and operational standards.[43] Registrars must comply with WHOIS accuracy mandates by collecting verifiable registrant contact information, investigating reported inaccuracies within specified timelines (e.g., four business days for complaints), and sending annual reminders to update data.[44] To prevent abuse, they implement measures under the RAA's Whois Accuracy Program Specification and anti-abuse provisions, including monitoring and restricting bulk registrations that could facilitate spam, phishing, or other malicious activities, such as requiring enhanced verification for high-volume requests.[45] Failure to meet these requirements can lead to decertification, as seen in 2019 cases where ICANN suspended or terminated accreditations for non-compliance. For instance, Net 4 India faced a 90-day suspension in June 2019 for violations including inadequate WHOIS data handling and transfer issues, followed by eventual termination.[46] Similarly, BatDomains.com Ltd. received a termination notice on 17 June 2019 due to persistent breaches like unpaid fees and failure to respond to compliance inquiries.[47] These actions underscore ICANN's enforcement role in maintaining registrar accountability.[47]Types of Registrars
Domain name registrars are categorized based on the types of top-level domains (TLDs) they manage, their sponsorship status, and their operational structures. Generic top-level domain (gTLD) registrars focus on unrestricted TLDs such as .com, .net, and .org, operating under ICANN accreditation to provide broad, global registration services; prominent examples include GoDaddy, which handles millions of such domains annually.[48] In contrast, country-code top-level domain (ccTLD) registrars specialize in nation-specific TLDs like .de for Germany, where entities such as DENIC serve as the central registry and accredit local registrars to manage registrations in compliance with national policies.[49] These distinctions arise because gTLDs emphasize international accessibility, while ccTLDs prioritize geographic and regulatory alignment, often requiring registrars to adhere to country-specific eligibility rules.[50] Sponsored and designated registrars handle restricted TLDs tied to specific communities or purposes, ensuring controlled access beyond standard ICANN accreditation. For sponsored TLDs like .aero, which supports the aviation industry, a sponsor such as SITA oversees eligibility and operations, with registrations limited to ICANN-accredited registrars that meet community-defined criteria outlined in sponsorship agreements.[51] Similarly, the .gov TLD is exclusively managed by designated registrars authorized by the U.S. General Services Administration (GSA); Verisign provided registry services from 2011 until 2023, when responsibilities transitioned to Cloudflare to enhance security and efficiency for government entities.[52][53] These models prevent unauthorized use, fostering trust in sensitive sectors by restricting registrations to verified participants. Reseller models enable non-accredited entities to offer domain services without direct ICANN involvement, partnering with accredited back-end registrars for technical fulfillment. Resellers, such as web hosting providers, sell domains under their own branding while relying on partners like Tucows platforms such as OpenSRS, which collectively manage over 22 million domains through a network of tens of thousands of resellers as of November 2025.[14][54] This structure lowers entry barriers for smaller businesses, as resellers are contractually bound by the accredited registrar's agreements and do not require separate ICANN accreditation.[2] Emerging registrar types leverage blockchain technology for decentralized operations, diverging from ICANN's centralized framework. The Ethereum Name Service (ENS), launched in 2017, functions as a blockchain-based system allowing users to register and manage .eth domains directly on the Ethereum network, providing censorship-resistant ownership without traditional intermediaries.[55] These decentralized models emphasize user control and interoperability across Web3 applications, though they operate independently of ICANN accreditation.[56]Core Services
Domain Registration Process
The domain registration process begins with a prospective registrant selecting an ICANN-accredited registrar or reseller to initiate the workflow.[2] The user first searches for domain name availability using the registrar's tools, such as those provided by Namecheap or GoDaddy, which query the relevant registry database to confirm if the desired second-level domain under a chosen top-level domain (TLD) is unregistered.[2][57][58] Upon finding an available name, the user selects the TLD—such as .com for generic purposes or country-code TLDs like .uk—and provides required registrant details, including legal name, postal address, email, and phone number, as mandated by ICANN's registration data requirements. As of August 21, 2025, the ICANN Registration Data Policy governs the collection, storage, and disclosure of this data, with enhanced privacy protections redacting non-essential information from public view.[59][2] Payment follows, typically ranging from $10 to $20 annually for standard .com domains, though fees vary by registrar and TLD.[60] Once details and payment are submitted, the registrar processes the request by forwarding it to the appropriate registry operator, establishing a contractual agreement between the registrant and the registrar.[2] This contract outlines the initial registration period, which can span 1 to 10 years as per ICANN policy, with options for auto-renewal to extend the term automatically upon expiration unless opted out.[61] Grace periods are also included: a post-expiration auto-renew grace period of up to 45 days allows cancellation without penalty if the domain was auto-renewed, followed by a redemption grace period of 30 days for recovery after deletion.[61] After successful registration, the domain becomes active, and the registrant can configure post-registration settings through the registrar's control panel.[2] This includes specifying name servers to point the domain to hosting services and adding initial DNS records, such as A records for IP addresses or MX records for email routing, to enable website and service functionality.[2] Variations exist across TLDs, particularly for premium domains, which registries designate as high-value names (e.g., short or keyword-rich) and charge significantly higher fees—often hundreds or thousands of dollars—due to their desirability. For such domains, registration may involve auctions or bidding processes managed by the registry or registrar to allocate the name to the highest bidder, rather than first-come, first-served.[62]DNS Hosting and Management
Domain name registrars often provide DNS hosting as a core service following domain registration, enabling users to manage the translation of domain names to IP addresses through authoritative name servers. This includes hosting name servers, where the registrar maintains the infrastructure to respond to DNS queries, and zone file management, allowing users to configure records such as A, CNAME, MX, and TXT via a control panel. Changes to these records, such as updating IP addresses for a website, typically propagate across the global DNS network in 24-48 hours, though it can extend to 72 hours in some cases due to caching by intermediate resolvers.[63][64][65] Advanced features in registrar-provided DNS hosting enhance flexibility for users. Dynamic DNS updates automatically refresh records when IP addresses change, which is particularly useful for environments with variable connectivity, and many registrars support this through API integrations or client software. Failover configurations monitor server health and redirect traffic to backup endpoints if the primary fails, minimizing downtime. Additionally, integration with content delivery networks (CDNs) is facilitated by adding CNAME records pointing to CDN endpoints, allowing registrars' DNS to route traffic efficiently to distributed edge servers for faster content delivery.[66][67][68] Using a registrar for DNS hosting offers simplicity, as it bundles management with domain registration in a single interface, reducing setup complexity compared to third-party providers like Cloudflare, which require separate nameserver changes. This centralized approach streamlines routine tasks like record edits and supports quick propagation without additional delegation steps.[6][69] However, registrar-hosted DNS can introduce limitations, such as serving as a single point of failure if the provider experiences outages, potentially affecting all associated domains. While convenient, it may lack the advanced global anycast networks or specialized performance optimizations found in dedicated DNS services, leading some users to opt for third-party alternatives for enhanced redundancy.[69][6]Security and Technical Features
DNSSEC Implementation
DNSSEC, or Domain Name System Security Extensions, enhances the security of the Domain Name System by adding cryptographic signatures to DNS records, thereby protecting against spoofing attacks such as DNS cache poisoning and redirection to fraudulent sites.[70] This protocol relies on a public-key infrastructure (PKI) where zone operators use private keys to sign their DNS data, producing records that authenticating resolvers can verify with corresponding public keys.[71] Key DNSSEC resource records include DNSKEY, which stores the zone's public keys; RRSIG, which contains the cryptographic signatures over other record sets; and DS (Delegation Signer), which links the zone's keys to the parent zone to establish a chain of trust.[71] By ensuring the integrity and authenticity of DNS responses, DNSSEC prevents tampering during transit without encrypting the data itself.[70] Domain name registrars play a pivotal role in DNSSEC implementation, particularly for domains where they also provide DNS hosting services, as they can generate key pairs, sign the DNS zone with private keys, and manage the resulting DNSKEY and RRSIG records.[72] For domains using external DNS providers, registrars facilitate the process by allowing customers to submit DS records, which the registrar then uploads to the parent registry (such as Verisign for .com domains) to anchor the child's zone in the chain of trust.[73] This delegation step is crucial, as it extends the root zone's established trust—signed since 2010—to second-level domains, but requires coordination between the registrar, registry, and DNS operator to avoid validation failures.[71] Despite its benefits, DNSSEC adoption remains low, with approximately 5% of second-level domains in major generic top-level domains (gTLDs) like .com signed as of 2025, compared to near-universal signing at the root and TLD levels.[74] Primary challenges include the technical complexity of key management, zone signing, and maintaining the chain of trust, which demands precise configuration across multiple parties and can lead to outages if mishandled.[75] Additionally, the lack of widespread resolver validation—only about 40-50% globally—and compatibility issues with legacy systems further hinder uptake, as unsigned domains resolve without issue while signed ones risk breakage.[76] These barriers have kept deployment fragmented, with a few proactive registrars driving most progress.[72] Several registrars have simplified DNSSEC for users; for instance, Namecheap provides free DNSSEC enablement for domains using its BasicDNS or PremiumDNS services, allowing customers to activate signing and manage DS records directly in their control panel.[77] ICANN's 2018 root zone Key Signing Key (KSK) rollover, which updated the cryptographic trust anchor for the first time since DNSSEC's root deployment, heightened awareness and encouraged broader validation adoption among resolvers and operators. A subsequent root zone KSK rollover, initiated on January 11, 2025, and scheduled to complete in 2026, continues to enhance the security of the DNS trust chain.[78][79] This event underscored the protocol's maturity while highlighting the need for registrar tools to ease implementation for end-users.[80]WHOIS and Privacy Protections
The WHOIS protocol, originally defined in RFC 3912 as a simple text-based query system over port 43, has long served as the primary means for accessing domain registration data, including registrant contact information.[81] However, its limitations in internationalization, security, and standardization prompted the development of the Registration Data Access Protocol (RDAP) by the Internet Engineering Task Force's WEIRDS working group starting in 2015.[5] RDAP, launched as the successor to WHOIS on January 28, 2025, provides a more secure, structured, and extensible framework for querying registration data, supporting features like HTTPS access and machine-readable JSON responses while phasing out the legacy WHOIS system entirely on the same date.[82] Since the adoption of the 2013 Registrar Accreditation Agreement (RAA), ICANN-accredited registrars have been required to maintain accurate WHOIS (now RDAP) data through the Whois Accuracy Program Specification.[83] This mandates registrars to investigate complaints of inaccuracies, validate registrant contact details via email within 15 days, and either correct the data or suspend/lock the domain if the registrant fails to respond.[83] These obligations ensure reliable public access to registration information for purposes such as anti-abuse investigations and domain disputes.[84] To address privacy concerns associated with public WHOIS exposure, many registrars offer domain privacy services that redact personal registrant details—such as names, addresses, and emails—by substituting proxy information in public queries.[85] For instance, Namecheap's WhoisGuard service, which replaces the registrant's data with anonymized details while forwarding legitimate correspondence, is provided free for the lifetime of eligible domains.[85] Similar proxy-based protections from other registrars, like GoDaddy's Domains By Proxy, typically cost between $5 and $10 annually but help mitigate risks of spam, harassment, and identity theft.[86] The European Union's General Data Protection Regulation (GDPR), effective May 25, 2018, profoundly influenced WHOIS practices by requiring explicit consent for processing and publishing personal data of EU residents.[86] This led to widespread redaction of individual registrant information in public WHOIS records, with registrars either anonymizing data by default or implementing tiered access models to comply with privacy mandates.[86] In response, ICANN issued a Temporary Specification on May 17, 2018, allowing limited public display of non-personal data while permitting vetted parties with legitimate interests—such as law enforcement or intellectual property holders—restricted access to redacted details.[86] Under ICANN's Registration Data Policy, effective since its adoption and updated to incorporate GDPR principles, registrars bear ongoing obligations for data retention and anti-abuse measures tied to registration data.[59] Registrars must retain full registration data for lawful purposes, including at least two years for abuse reports or as required by applicable laws, and enter into data protection agreements to safeguard information against unauthorized disclosure.[59] For anti-abuse, they are required to maintain dedicated channels, such as email addresses or web forms, for receiving and investigating complaints related to spam, phishing, or malware, with timely responses to support global enforcement efforts.[87] These requirements, integrated into registrar contracts, ensure balanced access via RDAP's Registration Data Request Service for legitimate nonpublic data inquiries.[82]Domain Lifecycle Management
Transfers and Portability
Domain transfers, also known as inter-registrar transfers, enable domain name holders to move the sponsorship of their domain from one ICANN-accredited registrar to another while retaining the same top-level domain (TLD).[88] This process promotes portability, allowing users to seek better pricing, enhanced services, or improved support without losing their domain name.[89] The procedure is governed by ICANN's Inter-Registrar Transfer Policy (IRTP), which standardizes transfers to ensure security and prevent unauthorized changes.[90] To initiate a transfer, the domain holder must first obtain an authorization code, commonly referred to as an Auth Code or EPP code, from their current (losing) registrar.[91] This unique code verifies the holder's identity and intent. The holder then contacts the gaining registrar, providing the domain name, Auth Code, and any required contact information. The gaining registrar submits the transfer request to the registry operator via the Extensible Provisioning Protocol (EPP). The losing registrar receives notification and has five calendar days to approve, deny, or cancel the request; failure to respond within this period results in automatic approval.[90] Upon completion, the transfer typically includes a free one-year extension of the domain's registration, and a 60-day lock is imposed to prevent immediate further transfers, enhancing security against fraudulent activity.[90][92] Several requirements must be met for a transfer to proceed. The domain must be at least 60 days old from its initial registration or previous transfer, ensuring stability and reducing abuse risks.[89] It cannot be within 60 days of a registrant contact information change, unless the holder opts out of the lock via Form of Authorization (FOA). The domain must be unlocked at the losing registrar, not in a redemption grace period, and free from disputes or court orders.[90] These safeguards, outlined in ICANN's policies, protect against unauthorized moves while facilitating legitimate portability.[93] The benefits of transfers include greater flexibility for domain holders to switch to registrars offering competitive renewal rates, superior customer service, or additional features like enhanced DNS management. Globally, inter-registrar transfers number in the millions annually, reflecting the dynamic nature of the domain market and the policy's effectiveness in supporting user choice.[94] For scenarios involving a change in TLD, such as moving from a .com to a .co domain, standard inter-registrar transfers do not apply, as they occur within the same registry and TLD. Instead, registrars or third-party services facilitate this through new registrations in the target TLD, often combined with content migration, DNS reconfiguration, or URL mapping to maintain branding continuity.[95]Expiration Handling and Drop Catching
When a domain name registration expires due to non-renewal, it enters a structured lifecycle managed by the registrar and the registry under ICANN guidelines, providing opportunities for the original registrant to reclaim it before it becomes available to the public. The process begins with the Renewal Grace Period, which typically lasts 0 to 45 days after the expiration date, during which the domain can be renewed at standard rates, though some registrars may charge a fee.[61][96] If not renewed, the domain moves to the Redemption Grace Period (RGP), a mandatory 30-day window where the original registrant can restore it by paying renewal fees plus a redemption fee, often ranging from $50 to $200 depending on the registrar and TLD.[97][98] Following the RGP, if unredeemed, the domain enters a Pending Delete status for 5 days, during which no actions are possible, after which it is released and becomes available for new registration by anyone.[99][100] This release phase often triggers intense competition, leading to the practice of drop catching, where specialized services or registrars use automated systems to register desirable expired domains the instant they become available. Drop catching involves backordering—placing advance requests to attempt registration upon drop—and leveraging direct API connections to registries for rapid submission, sometimes across multiple registrar accreditations to bypass rate limits.[101][102] Services like SnapNames, DropCatch, and NameJet offer these capabilities, often through auction-based platforms where successful catches are bid upon by multiple parties. Registrars such as GoDaddy also provide backorder services integrated into their platforms, allowing users to queue domains for automated attempts. Despite the technology, drop catching carries significant risks due to high competition, particularly for premium or previously valuable domains, with empirical studies showing that while drop-catching services account for over 80% of registration attempts at release, user success rates often fall below 10% for targeted high-value drops.[103] Costs add to the challenges, with fees typically starting at $10–$20 per backorder attempt but escalating to $100 or more for premium services or auctions, plus potential resale markups if the domain is won by the service.[104][105] Policy variations exist across TLDs, especially in new generic top-level domains (new gTLDs), where registries may impose additional phases or restrictions on releases, such as mandatory auctions or limited periods prioritizing certain claimants, differing from the standard ICANN timeline for legacy gTLDs like .com.[99][106] These can extend the overall process to 70–120 days in some cases, reducing predictability for drop catchers.[99]Business and Market Aspects
Registrar Evaluation and Rankings
Evaluating domain name registrars involves assessing multiple criteria to determine their performance, reliability, and market position. Key metrics include the volume of domains under management, which indicates scale and stability; for instance, GoDaddy manages over 84 million domains as of 2025, making it the largest registrar globally.[107] Pricing transparency is another critical factor, where registrars like Namecheap are praised for clear, competitive pricing, with .com renewal rates around $13.98 per year without hidden fees.[108] More recent data as of early 2026 highlights even lower options for .com domains, including Spaceship with promotional registration as low as approximately $5.87-$9 (depending on codes and limits) and renewals around $10.18, Cosmotown with renewals around $9.99, and Cloudflare Registrar at wholesale cost with no markup (typically around $10-10.50 for registration and renewal). Prices vary by TLD, promotions (often limited for first-year registrations), and other factors, with renewals near wholesale costs (~$9-10) being key for long-term savings.[10][9][11] Customer support quality, often evaluated through response times and multichannel availability (e.g., 24/7 live chat), is highlighted in third-party reviews, with registrars like Hostinger scoring high for accessibility.[109] Uptime guarantees, typically set at 99.9% or higher via service level agreements (SLAs), ensure minimal disruptions to domain resolution, as seen in offerings from IONOS and Dynadot.[12] As of early 2026, no authoritative lists of top domain name registrars specifically for 2026 are available, as the year is ongoing and rankings can change based on market dynamics. Current top domain registrars (as of 2024-2025 reviews) commonly include GoDaddy, Namecheap, Porkbun, Squarespace Domains (formerly Google Domains), and Dynadot. These are frequently ranked highly for pricing, ease of use, customer support, and features. These evaluations draw from authoritative sources such as ICANN's monthly reports on registrar transactions and market shares, which track new registrations and transfers for TLDs like .com.[8] Third-party analyses from DomainNameWire provide insights into growth trends, while tools like nTLDStats monitor shares in new generic top-level domains (gTLDs), where GoDaddy holds about 15% and Namecheap 14% as of late 2025.[110] Emerging trends include rapid growth in specialized TLDs like .ai, with over 60% year-over-year increase in 2025 registrations.[111] Additional factors influencing rankings include innovation in user interface and experience (UI/UX), such as intuitive dashboards for bulk management, which enhances usability for enterprise users.[12] Support for internationalized domain names (IDNs), enabling non-Latin scripts, is now standard among major registrars following ICANN's IDN Guidelines 4.1 implementation effective May 2025, promoting global accessibility.[112] Sustainability practices, like carbon-neutral operations and promotion of eco-friendly TLDs such as .eco, are increasingly weighted in evaluations, with registrars adopting green hosting to reduce environmental impact.[113] In 2024-2025 rankings, GoDaddy leads due to its massive scale and comprehensive tools, followed closely by Namecheap for affordable, privacy-focused services, IONOS for robust European market presence with strong uptime, Porkbun for competitive pricing and simplicity, Dynadot for reliable service and features, and Squarespace Domains for seamless integration with website building tools. Tucows and Dynadot also rank highly in ICANN's .com transaction data, reflecting steady growth in registrations.[108][114] For international domains like .com, recommended registrars based on recent evaluations include Namecheap for its low costs, free WHOIS privacy, and easy-to-use interface; Cloudflare Registrar for at-cost pricing (around $10-10.50 for .com) and enhanced security features; Spaceship for promotional first-year registration prices (as low as approximately $5.87-$9 with codes) and competitive renewals (| Registrar | Domains Under Management (2025 Est.) | Key Strengths |
|---|---|---|
| GoDaddy | 84M+ | Scale, UI innovation |
| Namecheap | 26M+ | Pricing transparency, IDN support |
| IONOS | 22M+ | Uptime (99.99%), customer support |
