ICANN punts on Oman meeting decision

There can be few in the ICANN community feeling confident that the Org’s annual general meeting is going to take place in Oman, as currently planned, but its board has kicked the can on a decision to go ahead or cancel.

The AGM is due to happen in Muscat from October 17, but the US-Israel war on Iran has raised serious question marks about the venue’s suitability to host a large international meeting.

Oman has been one of several allied countries targeted by Iranian retaliatory drone and missile strikes. Three people were killed there by such attacks in March, at the start of the war.

With news about the likely end date of the conflict changing on a daily basis, and seemingly subject to the whims and domestic pressures of Donald Trump, it remains unclear whether Muscat will be a safe or practical destination come October.

ICANN’s board of directors had “October 2026 ICANN Meeting Venue Contracting” on its consent agenda for its meeting last Sunday, but there’s currently no published resolution, if one was passed.

It’s possible that the motion was shunted from the consent agenda to the main agenda, where two “confidential” topics were discussed. But the absence of a public announcement suggests no decision to relocate the meeting has yet been taken.

The likely issue with Oman as a destination likely isn’t so much one of safety — though that is certainly a concern — but one of practicality. Air travel in the region has been seriously complicated by the war.

I recently had a 12-hour layover in Abu Dhabi, another Iranian target, and had to take shelter from drone or missile attacks at the airport on five separate occasions.

While that’s no joke, it was quite chucklesome that the UAE government’s alerts, pushed automatically to every phone in the danger zone, were signed off with “MOI” for Ministry of Interior, which my phone decided to read aloud in an almost flirtatious female voice as “mwah”.

Comment Tagged: ICANN, icann87, muscat, oman, war

DNSSEC claims another registry victim

DNSSEC is widely touted as a crucial security upgrade for the domain name system, but as so often is the case with security measures, it can also cause serious problems.

DENIC, the registry operator for Germany’s .de, became the latest victim of a DNSSEC screw-up earlier this week, when a botched key rollover led to the entire ccTLD being flagged as bogus by many ISPs.

That’s no small issue — .de is the internet’s third-largest TLD after .com and .cn, with some 17.9 million domains under management.

The company said that the outage began at 2157 UTC on Tuesday night, caused by “incorrect DNSSEC signatures” being deployed during a “routine, scheduled key rollover”, and was fixed by 0115 the following day.

Bad sigs means that any attempt to resolve a .de domain would fail, but only on networks where the DNS resolvers strictly enforce DNSSEC validation. That includes major free resolver networks such as those run by Google and Cloudflare.

The workaround is to temporarily stop enforcing DNSSEC validation, which can be done using a mechanism baked into the IETF standard. Cloudflare has a fairly comprehensive technical description of how it responded here.

DENIC said it has temporarily suspended is key rollover schedule while it figures out what went wrong.

The registry is far from alone when it comes to DNSSEC snafus. Literally dozens of ccTLDs and gTLDs have experiences outages related to the protocol since it was added to the DNS root in 2010.

Comment Tagged: .de, denic, DNSSEC

.music has competition as .mu repositions

Identity Digital and it.com Domains are to market the Mauritius ccTLD, .mu, as an open alternative to the .music gTLD.

According to it.com, the ccTLD will be marketed internationally as “Everyone’s Music Domain”, starting with outreach at the trademark-focused INTA Annual Meeting in London this week.

It’s a non-sunrise sunrise period, being called the Trademark Priority Period, though this seems to be a case of branding rather than the imposition of any strict rules — .mu has been around for decades and domains there are already available to buy.

It’s rather a headsup period, it seems, with trademark owners being marketed to before the general public. This period will run from May 15 to June 28, it.com said.

Policies and launch details are expected to be announced soon.

There is already a domain for music, of course — .music. It’s a latecomer from the 2012 application round. It launched in late 2024 and had fewer than 30,000 domains under management at the end of 2025, and fewer than 7,500 names in its zone file today.

The issue with .music is that it’s a “community” gTLD, conceived at a time when concerns about music piracy online were a lot more acute than they are today, and it has registrant eligibility restrictions.

While .music domains have standard shopping cart friction and can begin resolving immediately, registrants are asked to complete a post-reg identity verification process that looks like a bit of a faff. Presumably, .mu domains will be less restrictive.

Pricing for the repurposed .mu has yet to be announced, but it’s on sale today with retail renewal pricing appearing to start at about $75 a year. That’s in the same ball-park as .music.

While rebadging .mu as a domain for music may initially hit like another case of a ccTLD trying to shoehorn itself into a meaning it was not intended to have, the use case is not without precedent. The rock band Muse has long used muse.mu for its web site, for example.

The rebranding of .mu comes about a year after Identity Digital took over the back-end registry services for the ccTLD in partnership with the Government of Mauritius.

1 Comment Tagged: .mu, .music, identity digital, it.com, mauritius

Over 100 new gTLD bids have already been announced

With the 2026 ICANN new gTLD application window now officially open, one striking difference compared to the 2012 round is the number of organizations that have broken cover to announce that they will apply.

Back in 2012, consultants excitedly pointed to Canon, the Japanese electronics firm, as the convincer. It had openly revealed it planned to apply for the dot-brand .canon two years earlier.

A handful of gTLDs related to communities, cities or causes — such as .gay, .nyc and .eco — had also been announced. Several had multiple announced applicants and were ultimately contested.

But today, with the application window now five days open, DI’s free risk analysis tool, Stringtel, currently has more than 100 announced applications in its database.

With dot-brands expected to make up a sizeable chunk of 2026 applications, very few major brands have actually put their heads above the parapet. Salesforce seems to be the most well-known, though its revelation came via an ICANN director’s conflict disclosure rather than a full-throated formal announcement.

The biggest cohort of announced applications seems to come from applicants representing an if not entirely then certainly uncommon type of gTLD — which you could call the non-dot-brand-dot-brand, or perhaps more simply “open dot-brand”.

By this I mean organizations, typically in the blockchain or cryptocurrency space, that have said they will apply for gTLDs matching their brand but make second-level domains available to their users, rather then keeping the whole namespace in-house.

There are dozens of such announced bids. Some are already selling domains that resolve on blockchains rather than DNS. Due to cost, complexity, or risk, I don’t expect every announcement in this space to translate into an eventual application.

We’ve also seen announcements of applications for generic strings, often in hot industries such as AI, crypto or podcasting. Stringtel already has records for the likes of .crypto, .agi, .podcast and .blockchain, for example. A couple, such as .chain and .anime, are already contested.

While we’ll likely discover how many applications ICANN has received not long after the application window closes in August, we won’t find out what strings have been applied for until October at the earliest.

Comment Tagged: ICANN, new gTLDs, next round

2026 new gTLD round has actually opened

As of today, you can now apply to own a piece of the internet’s root zone for the first time since 2012.

Almost unbelievably, given some of its relatively recent history, ICANN has hit its deadline and opened up its systems for companies and organizations to file applications for new gTLDs.

The application window opened late April 30 and will close August 12. Many applicants will have been working on their bids for some time, but may hold out until later in the window to actually commit.

ICANN CEO Kurt Lindqvist said in a press release: “Whether building a brand for a company, spotlighting a geographic region or city, strengthening a community, or launching a business to offer domain names under a new registry, a new gTLD can be an innovative tool for commerce, security, and communication.”

ICANN noted that it’s expecting to receive applications for gTLDs in non-Latin scripts — 27 are available — to broaden the linguistic diversity of the DNS. Whether the Org has done enough awareness-raising outreach in non-Anglophone regions is an open question, however.

The cost of applying begins at $227,000. That’s the base application fee, but it will likely often be bumped up by thousands for applicants that need special extra evaluation services.

There’s also going to be an auction of last resort for competing applications for the same strings, where ICANN pockets the proceeds. Unlike the 2012 round, there’s no ICANN-endorsed pathway to privately resolving contention sets for cash.

As many as 75 organizations around the world may have qualified for the Applicant Support Program, which will subsidize application fees by as much as 80%.

We won’t know who has applied for what until probably around mid-October. Applicants then get two weeks to change their strings to their back-ups if they find themselves in unwelcome contention sets. Final strings are confirmed in November.

That’s all assuming the 2026 room is more or less the same size as the 2012 round, in which there were 1,930 applications. A larger batch of applications may delay things a little.

Applications can be filed via ICANN’s new TLD Application Management System (TAMS). The Org has also made a great number of documents and archived webinars available that talk prospective applicants through the process.

Applicants, or simply the curious, can also use DI’s free Stringtel tool to investigate the risks and opportunities associated with their chosen gTLD strings.

3 Comments Tagged: ICANN, new gTLDs, next round

Nominet wants to fight shrinkage without self-abuse

Nominet has acknowledged that .uk has been shrinking for some time and wants to do something about it without accidentally inviting hordes of spammers and scammers into its zone.

The registry said this week that it is responding to calls from its registrar members by introducing a new .UK Growth Programme, set to launch June 3.

.uk peaked at 13,348,378 domains in July 2019 (that number includes second and third-level registrations) but it’s lost three million since then, reporting 10,371,270 names at the end of March.

Nominet is throwing money at the problem, saying the new program will offer registrars “either a .UK price promotion or marketing campaign funds”. Public details are scant, but the company said:

The marketing option would be competitive, with campaigns selected on their ROI potential, with caps to ensure a variety of members can take part. The promotions route would offer a discount on new registrations across the .UK family for the first year, during a specific month.

But Nominet acknowledged that discounts often lead to increased abuse and/or reg spikes followed by junk drops, and says it want to design its program to minimize these negate effects. How? The registry didn’t say.

Comment Tagged: .uk, nominet

Verisign cranks up guidance as .com swells

Verisign has significantly bumped up its growth expectations for 2026, saying it expects to sell far more domains than previously thought.

The company said it expects its domain name base — the combined domains under management for .com and .net — to grow by between 3.1% and 4.3% over the course of the year.

That’s a notable increase from the prediction of 1.5% to 3.5% it made just three months ago.

Verisign ended March with 176.1 million names in its base, up 3.7% on a year earlier and 2.54 million domains during the three months of Q1.

CEO Jim Bidzos told analysts that the renewed growth came primarily as a result of marketing programs aimed at its registrars, its registrars return to a focus on customer acquisition, and AI web site creation tools.

Verisign reported Q1 revenue up 6.6% versus last year at $429 million, with net income up from $199 million to $215 million.

It threw cash at its shareholders, buying back $214 million of stock and giving them a $0.81-per-share dividend.

Comment Tagged: earnings, verisign

More Verisign bitchiness as .com price rise revealed

Verisign is putting up the price of a .com domain again, and it clearly wishes it could raise it even more.

The registry said that it will increase the base annual wholesale fee by 71 cents from $10.26 to $10.97 effective November 1 this year.

That’s the maximum 7% hike it’s permitted to impose under its trilateral arrangement with ICANN and the US Department of Commerce.

It’s the first announced price increase in two years. That’s because its contract only allows rises in the last four out the six years of its duration.

The company has never failed to exercise its price-raising powers, but it did freeze its fees during the first year of the Covid-19 pandemic.

But it has also never failed in recent years to make catty comments suggesting a profound bitterness that its prices are regulated at all.

Announcing Verisign’s first-quarter financial results last week, CEO Jim Bidzos said:

The new $10.97 price that will become effective November 1 is the maximum price that we can charge registrars. The registrars, however, are entirely price unrestricted and can sell .com registrations at any retail price they choose, and those prices often differ significantly from the price we are limited to.

This apparent frustration has been a prominent mantra since the company negotiated the latest version of the .com contract, during which Joe Biden’s Commerce had evidently wanted lower pricing and Verisign had pushed back with a call for greater regulation in downstream pricing.

Current .com registrants will be able to lock in their current prices by renewing their names for up to 10 (in practice usually nine) years before the price hike takes effect.

2 Comments Tagged: .com, prices, verisign

Is a .tree gTLD very cool or very silly?

.tree is one of the first-ever publicly announced gTLD applications, predating even the 2012 application round, and it seems to have been proposed for a second time.

A web site using dottree.org, registered a week ago, is saying there’s a plan to apply for .tree in the forthcoming ICANN application round, with a charitable goal.

The project says it will donate a dollar from every .tree domain registration and annual renewal to a charity that plants trees in Dubai, with each $1 donation putting one tree in the ground.

At first glance, it seems like a nice idea, but I’m not sure it holds up to closer inspection.

There may be virtue-signalling advantages to running a site on a .tree domain if you’re in the environmental game or lumber business.

But if a registrant’s primarily interest is getting trees planted, why not just donate a buck to a reforestation charity directly? Why not donate the full amount you would otherwise have spent on the domain? Or more?

And how much demand would there be for .tree domains on their own merits?

Fortunately, DI’s new Stringtel tool has some data there. According to Stringtel, about 47,000 current .com/.net/.org domain names end in the substring “tree”, which may give an indication of potential registrations. About 2,000 of those end in “familytree”.

That’s the same frequency as we see domains end in “wine”, “dog”, or “paris”, and the three gTLDs matching those strings each have 17,000 to 18,000 domains under management, which is not terrible.

Should .tree perform just as well, envelope-based calculation suggest it would create the equivalent of a smallish forest that could be traversed on foot in minutes and not really suck much CO2 out of our increasingly fragile atmosphere.

But the .tree proposal would have a second forest of the same size planted in the second year (assuming 100% domain renewals) and so on. The effect would stack up over time, so maybe the idea does have merit.

1 Comment Tagged: .tree, ICANN, new gTLDs

The internet just got its first new TLD since 2022

There’s a new gTLD in the root, the first time ICANN has added a string in over four years.

Don’t get too excited though: it’s a dot-brand, kinda.

As of the weekend, .merck is live and resolving, though only the mandatory nic.merck registry domain exists right now.

The gTLD is interesting because it seems to be a rare example of two companies with the same name sharing a dot-brand.

The only other such arrangement I’m aware of is .sas, which is shared by the SAS Institute and SAS Airline, neither of which actually use it.

.merck seems to be jointly controlled by two pharmaceutical companies, one American and one German, both called Merck, which were under common ownership until World War I split them apart.

After they both applied for .merck in ICANN’s 2012 application round, over a decade of lawyering followed before they finally came to an arrangement.

There’s no Specification 13 in the .merck Registry Agreement, so it’s not technically an exclusive-use dot-brand at this time.

The back-end registry services provider, perhaps surprisingly, is South Africa-based DNS Africa, in what seems to be the company’s first deal outside its home continent.

1 Comment Tagged: delegation, dns africa, ICANN, merck, new gTLDs