Verisign to get .com for six more years, but prices to stay frozen

ICANN and Verisign have agreed to extend their .com registry contract for another six years, but there are no big changes in store for .com owners.
Verisign will now get to run the gTLD until November 30, 2024.
The contract was not due to expire until 2018, but the two parties have agreed to renew it now in order to synchronize it with Verisign’s new contract to run the root zone.
Separately, ICANN and Verisign have signed a Root Zone Maintainer Agreement, which gives Verisign the responsibility to make updates to the DNS root zone when told to do so by ICANN’s IANA department.
That’s part of the IANA transition process, which will (assuming it isn’t scuppered by US Republicans) see the US government’s role in root zone maintenance disappear later this year.
Cunningly, Verisign’s operation of the root zone is technically intermingled with its .com infrastructure, using many of the same security and redundancy features, which makes the two difficult to untangle.
There are no other substantial changes to the .com agreement.
Verisign has not agreed to take on any of the rules that applies to new gTLDs, for example.
It also means wholesale .com prices will be frozen at $7.85 for the foreseeable future.
The deal only gives Verisign the right to raise prices if it can come up with a plausible security/stability reason, which for one of the most profitable tech companies in the world seems highly unlikely.
Pricing is also regulated by Verisign’s side deal (pdf) with the US Department of Commerce, which requires government approval for any price increases until such time as .com no longer has dominant “market power”.
The .com extension is now open for public comment.
Predictably, it’s already attracted a couple of comments saying that the contract should instead be put out to tender, so a rival registry can run the show for cheaper.
That’s never, ever, ever, ever going to happen.

ICANN says Verisign should stay in charge of root zone

Verisign should stay in its key role in root zone management after the IANA transition process is complete, according to ICANN CEO Fadi Chehade.
The company currently acts as “maintainer”, alongside the US government as “administrator” and ICANN/IANA as “operator”.
This means Verisign is responsible for actually making changes — adding, deleting or amending the records for TLDs — in the root zone file.
In a blog post yesterday, Chehade said that ICANN will “establish a relationship directly with the third-party Maintainer”, adding:

As a means to help ensure stability, ICANN’s recommended implementation option is to have Verisign continue its role as the Maintainer. However, we will be working closely with all relevant parties including the Root Zone Operators to ensure there are contingency options in place to meet our absolute commitment to the stability, security and resiliency of the Domain Name System.

I wholeheartedly agree that Verisign should stay in its role, or at the very least that ICANN should not take over.
As we’ve learned over the last couple of years of software glitches in the new gTLD program, some of them security-related, ICANN would be a poor choice today to maintain this critical resource.
Chehade noted that the US National Telecommunications and Information Administration would be replaced in its “administrator” role by whatever mechanism the ICANN community comes up with during the transition process.

Top-level domains top 500

The number of live top-level domains on the internet has surpassed 500 for the first time.
The delegation yesterday of 12 new gTLDs — .archi, .consulting, .cooking, .country, .fishing, .haus, .商城, .horse, .miami, .rodeo, .vegas and .vodka — tipped the total TLD count to 507.
For the numbers geeks, here are some stats from the DI PRO database:

• 285 ccTLDs
• 222 gTLDs
• 60 IDN TLDs
• 24 IDN gTLDs
• 199 gTLDs delegated in the 2012 round
• 15 gTLDs delegated in previous rounds
• 8 legacy gTLDs
• 129 new gTLDs have started Sunrise periods
• 65 new gTLDs have started Trademark Claims periods
• 367 new gTLDs have ICANN contracts
• 1 new gTLD application is still in Initial Evaluation
• 6 new gTLD applications are still in Extended Evaluation
• 9.7 new gTLDs have been delegated per week, on average, since January 1, 2014
• 36 new gTLDs were delegated in March

Based on the rate that Verisign has been adding new gTLDs to the root recently, we should expect that to top 200 in the next few days. The number of new gTLDs could outstrip the number of ccTLDs next month.

Verisign stock punished after US move from root control

Verisign’s share price is down around 8% in early trading today, after analysts speculated that the US government’s planned move away from control of the DNS root put .com at risk.
The analyst firm Cowan & Co cut its rating on VRSN and reportedly told investors:

With less US control and without knowledge of what entity or entities will ultimately have power, we believe there is increased risk that VRSN may not be able to renew its .com and .net contracts in their current form.

It’s complete nonsense, of course.
The US announced on Friday it’s intention to step away from the trilateral agreements that govern control of the root between itself, ICANN and Verisign. But that deal has no dollar value to anyone.
What’s not affected, as ICANN CEO Fadi Chehade laboriously explained during his press conference Friday, are the contracts under which Verisign operates .com and .net.
The .com contract, through which Verisign derives most of its revenue, is slightly different to regular gTLD contracts in that the US has the right to veto terms if they’re considered anti-competitive.
The current contract, which runs through 2018, was originally going to retain Verisign’s right to increase its prices in most years, but it was vetoed by the US, freezing Verisign’s registry fee.
So not only has the US not said it will step away from .com oversight, but if it did it would be excellent news for Verisign, which would only have to strong-arm ICANN into letting it raise prices again.
Renewal of the .com and .net contracts shouldn’t be an issue either. The main rationale for putting .com up for rebid was to improve competition, but the new gTLD program is supposed to be doing that.
If new gTLDs, as a whole, are considered successful, I can’t see Verisign ever losing .com.
Verisign issued a statement before the markets opened today, saying:

The announcement by NTIA on Friday, March 14, 2014, does not affect Verisign’s operation of the .com and .net registries. The announcement does not impact Verisign’s .com or .net domain name business nor impact its .com or .net revenue or those agreements, which have presumptive rights of renewal.

ICANN, Verisign and NTIA “ready for 100 new gTLDs per week”

The three main entities responsible for managing the domain name system’s root zone have confirmed that they’re ready to add 100 or more new gTLDs to the internet every week.
In a statement, (pdf), ICANN, Verisign and the US National Telecommunications & Information Administration jointly said:

Based on current staffing levels and enhancements that are currently underway to the [Root Zone Management] system, the Root Zone Partners are able to process at least 100 new TLDs per week and will commit the necessary resources to meet all root zone management volume increases associated with the new gTLD program.

The letter was sent in response to a request from ICANN’s Security and Stability Advisory Committee, which asked in July whether ICANN, Verisign and the NTIA were ready for the new gTLD load.
The three-party Root Zone Management procedure used to add TLDs or update existing ones is getting more automation, which is expected to streamline the process.

Verisign: our DNS was not hacked

Verisign today reiterated that the recently revealed 2010 security breaches on its corporate network did not affect its production domain name system services.
In a statement, Verisign said:

After a thorough analysis of the attacks, Verisign stated in 2011, and reaffirms, that we do not believe that the operational integrity of the Domain Name System (DNS) was compromised.
We have a number of security mechanisms deployed in our network to ensure the integrity of the zone files we publish. In 2005, Verisign engineered real-time validation systems that were designed to detect and mitigate both internal and external attacks that might attempt to compromise the integrity of the DNS.

The statement followed several news reports that covered the hacks and speculated about the mayhem that could ensue if Verisign’s root or .com zone systems were ever breached.
The information the company has released so far suggests that the attacks were probably against back-office targets, such as user desktops, rather than its sensitive network operations centers.