to maintain a few hundred bytes in a database small enough to be served from a computer from the 90s?
Putting ~170 million .com records into a RDBMS on a 90s computer is not enough infrastructure to serve ~746 billion DNS queries a day : https://www.verisign.com/about-us/
They don't use off-the-shelf Redis/PostgreSQL/MySQL and they have more uptime reliability than Github, AWS us-east-1, Anthropic Claude, etc.
Verisign may still overcharge for what they do but nevertheless, the computing infrastructure isn't trivial.
> to maintain a few hundred bytes in a database small enough to be served from a computer from the 90s?
I don't like them, but they obviously have more than server operation costs. You can't really look at any business system like you did.
I only served a (custom) root.zone. It was tiny compared to today's root.zone filled with garbage TLDs and "security" theater. This file is soon to explode in size once again
Today I can serve com.zone. The computers I own have relatively modest specs
This lawsuit will settle, probably before discovery, but possibly we may learn a few things from the pleadings
I have wondered at times whether gTLDs were a mistake and everything should have been under ccTLDs.
Same goes for payment methods. I recently tried to buy some crypto to pay for (legally) at some "legit" sites like openrouter. I gave up after 2-3 days. Tried exchanges in my own country and also some famous non-local ones that are legally compliant to operate in my country and goodness it was a clusterfuck of darkpatterns and nightmare of steps and waits and locks and what not. I finally just created a temp card on my banking app with tiny credit spend limits and got done with it.
We attack the wrrong problems. Like "make it decentralised"! The thing is the decentralised immediately becomes centralised for any meaningful usage and often much worse and slower and in some cases costlier. Imho, we should rather work for "make them accountable" and the accountability should be decentralised to different countries and eventually to people. But then this happens via Govts and even the ones that are actually elected by people don't like to give such powers into the hands of the people and lose contorl.
That some company is behind .com or some TLD and earning some money with that is a nothingburger.
Imagine you fail to pay your cellphone bill, which is much higher per year than a domain renewal, and then your operator puts your number on auction and your competitors buys it and start taking your clients' calls.
Cloudflare, porkbun and others can get you a .com for $10-$11/yr
I did not know about the requirement about being able to renew the domain for transfers, I was considering buying a .com for a long duration but maybe I'll hold off on that.
I don't think Verisign is above doing these kinds of financial crimes, but until the lawsuit has been won, nothing is proven. Plus, the lawsuit will most likely be settled if the allegations are true, rather than actually applying the law; class action lawyers are in it for the money, after all, not for enacting justice.
There are several decentralized schemes where the identifier is cryptographically bound to a private key, none of which I can use in my browser. Since a majority of people use a handful of public DNS resolvers anyways, these resolvers could deploy split DNS for a special-use domain, let's say ".did" (short for decentralized identity), and resolve this special TLD differently. This way people do not need special software to access websites on a ".did" domain.
Maybe DNSSEC could be mandatory and your domain name is the key digest from the DS record, although this prevents key rotation while maintaining a stable domain name.
fees have a PoW/PoS function, too cheap a fee will cause spam and squatting.
let’s be real, 10$/yr is less than 1$/month, .com domains are cheap
> NTIA and Verisign have agreed to extend and modify the Cooperative Agreement. These modifications are in line with policy priorities of the Trump Administration. The changes create a new commitment to content neutrality in the Domain Name System (DNS), provide market-based pricing flexibility, and reduce the regulatory burden on Verisign.
> Amendment 35 confirms that Verisign will operate the .com registry in a content neutral manner with a commitment to participate in ICANN processes. To that end, NTIA looks forward to working with Verisign and other ICANN stakeholders in the coming year on trusted notifier programs to provide transparency and accountability in the .com top level domain.
> The amendment repeals Obama-era price controls and provides Verisign the pricing flexibility to change its .com Registry Agreement with ICANN to increase wholesale .com prices. Specifically, the flexibility permits Verisign to pursue with ICANN an up to 7 percent increase in the prices for .com domain names, in each of the last four years of the six-year term of the .com Registry Agreement. The changes also affirm that Verisign may not vertically integrate or operate as a registrar in the .com top level domain.
In 2024, the NTIA announced that it had renewed its agreement with Verisign. Their statement said that the NTIA believed that lower .com prices would be in the public interest, but were unable to reach an agreement with Verisign on pricing https://www.ntia.gov/blog/2024/com-cooperative-agreement-ens... .
The reason why the NTIA were no longer able to limit wholesale .com pricing was due to the 2018 amendment to the .com contract basically removing all negotiating leverage the NTIA had over Verisign. The amendment included provisions that made the agreement automatically renew every six years unless the NTIA gave timely notice of nonrenewal (so if the two sides couldn't reach an agreement it would continue in its current form), and allowing Verisign to continue operating the .com TLD even if the agreement was terminated.
The plaintiffs will have to prove that Verisign was acting unlawfully despite its prices being explicitly permitted by its arrangements with the US government. They'll also have to prove that they even have grounds to sue, when the Illinois Brick doctrine establishes that indirect purchasers of goods/services can't seek damages for antitrust violations. In this case, this means that the end domain purchasers may be unable to sue because they purchased their domains from registrars rather than directly from Verisign.
ccTLDs are at the whim of the country. If you went with the '.su' ccTLD from the soviet union some years back, well, that would have been quite unfortunate.
Legally I feel like they're also worse. Like, say you're an abortion clinic operating in the regressive country of the US, and you get a '.us' ccTLD, surely it's more likely the government outlaws abortions and censors your domain via the registrar than if you used a '.com'?
.su is still being operated. Still being sold, even. How bad .su is for you depends on how friendly you are with the current Russian regime (though that also applies to the American regime, as the owners of autistici.org found out, though .org has always been American and .su was non-Russian for about 15 months).
If we instead take another country, like Italy, the reasoning would be sound. If Italian governament bans abortions in Italy, it's more likely that the auhtorities are able to restrict the sites registered on .it than .com
One particular weird example would be the Bulgarian .bg TLD: https://eualternative.eu/guides/bulgaria-bg-private-registry...
The story of .org price caps and the Ethos Capital sale, where sanity prevailed in about nine tenths of one of the two cases (Ethos Capital didn’t get to buy .org, but they do operate it), shows some of these issues.
I just wonder if, in the absence of gTLDs which it can own, with only ccTLDs to operate, Afilias might not have become the monster it did.
I am naive for hoping things might have turned out better, but… maybe.
Unfortunately, I’m not sure if there are actually any lies in their request <https://itp.cdn.icann.org/en/files/consensus-policies/rsep-2...>.
To begin with, the form is really not well-applicable to such requests, but is nonetheless the process that gets used for such things.
Partly because of that, and partly because there are specific meanings of things in the field, there are various things that look like lies, but which aren’t actually. Saying “there will not be any effect on the life cycle of domain names” in §2.1, for example, is technically true: it doesn’t change the life cycle of domain-names-as-a-category, it just deletes a bunch of names (which you could describe as affecting their life cycles!) and removes a category of possible names from registration.
There are also things like §3.6, “Have you communicated with any of the entities whose products or services might be affected by the introduction of your proposed service?” where they just said “no”. (I think most people’s idea that there were lies springs from this section, and misunderstanding that the two sentences of the answer are responding to the two questions; they’re not saying that communicating with people is not applicable.) Irresponsible, and an obvious eyebrow-raiser, but presumably true. My biggest complaint on technicalities would be in §6.2 where they said they consulted with “a select group of registrars comprising a majority of the user base”… whereas I’d consider the registrants to be the user base, and they have said they didn’t consult with them.
§5.1 is perhaps the most ridiculous to me, though, when they say “yeah, our contract says we have to do third-level registrations, we’ll talk about removing that from the contract after discontinuing them”. Probably a part of the procedure, given how they word things, but ludicrous all the same.
They’re also definitely incapable of following instructions. In §5.1 when instructed to write “N/A” they wrote “Not applicable”, and in §7.3 when instructed to write “N/A.” they wrote “None.”
I never really had any issues w/ GoDaddy, but am looking to change to Cloudflare now. I don't understand what am I paying $20+ for.
.com and most of the other traditional gTLDs should probably be considered equivalent to .us for legal issues.
And serving DNS for the root or a big zone is technically challenging. You want 100% uptime despite DDoS attacks, that's not simple.
Actually, tor is also not browser centric at all either. It does TCP (if not more), so any protocol will do. Proxy is typically a SOCKS interface IIRC, so any client will often do as well.