The domain world runs on the “3 R’s” plus a coordinator. ICANN sets the policy and, through IANA, keeps the master list of TLDs. A registry is the wholesale operator of one TLD — Verisign runs .com and .net. A registrar is the accredited retailer you actually buy from (GoDaddy, Namecheap, Cloudflare). The registrant is you, the person or organization that holds the domain.
These roles are easy to mix up because they all start with similar words. The trick is to think of a supply chain: a policy body at the top, a wholesaler that operates each extension, a retailer that sells to the public, and the customer who ends up holding the name. Get the chain straight and terms like “Verisign registry” or “ICANN DNS” stop being confusing.
This guide gives the full four-role picture. If you only need the two-sided wholesale-vs-retail contrast, see registry vs registrar; for the deep dives on each, see what is a domain registry and what is a domain registrar.
Who are the four players?
Here is each role side by side — what it does, and a concrete example you will recognize.
| Role | What it does | Example |
|---|---|---|
| ICANN | Non-profit that coordinates the system and sets policy; via IANA maintains the root zone (the list of TLDs). Does not sell domains. | ICANN; IANA function |
| Registry | Wholesale operator of a TLD — runs its authoritative database, zone and name servers; sets price and rules for that extension. | Verisign (.com, .net); PIR (.org); Nominet (.uk) |
| Registrar | Accredited retailer you buy from; manages your account and talks to the registry by EPP. | GoDaddy, Namecheap, Cloudflare |
| Registrant | You — the person or organization that registers and holds the rights to use the domain. | Your business or your own name |
Registry, registrar and registrant — the three core roles in registering a domain: the wholesale TLD operator, the accredited retailer, and the end holder. ICANN sits above all three as the coordinating policy body.
What does ICANN do (and what is “ICANN DNS”)?
ICANN — the Internet Corporation for Assigned Names and Numbers — is a non-profit that coordinates the naming system rather than running websites or selling domains. It accredits registrars, signs contracts with registries, and through its IANA function maintains the root zone: the authoritative master list of every TLD. When people say “ICANN DNS,” they loosely mean ICANN’s coordination of the DNS naming system and the root. For more, see what is ICANN and who controls TLDs.
ICANN sets the rules; it does not sell
You can never buy a domain “from ICANN.” ICANN’s job is policy and coordination — deciding which TLDs exist, accrediting the companies that sell them, and keeping the root consistent worldwide. The actual selling always happens at the registrar level.
What is a registry, and why “Verisign registry”?
A registry is the wholesale operator of a single TLD. It runs the authoritative database and name servers for that extension and decides the wholesale price and registration rules. Verisign is the registry for .com and .net — so “Verisign registry” simply means the operator behind those two extensions. Verisign also operates two of the internet’s root servers (the A and J servers) and the root zone maintainer function. Other registries include Public Interest Registry for .org, Nominet for .uk, and Identity Digital (formerly Donuts) for many newer gTLDs.
Registry vs registrar in one line
The registry is the wholesaler that operates the whole extension; the registrar is the retailer that sells you one name within it. Many registrars sell under the same registry, just as many shops stock the same manufacturer’s product.
Registrar and registrant: the retail end
The registrar is the ICANN-accredited company you actually deal with — GoDaddy, Namecheap, Cloudflare or the former Google Domains, now part of Squarespace. It sells registrations, manages your account and renewals, and communicates with the registry behind the scenes using a protocol called EPP (Extensible Provisioning Protocol). The registrant is you: the individual or organization that registers a name and holds the rights to use it. To go through the actual purchase, see how to register a domain name.
- Reseller: a company that sells domains under a registrar’s accreditation rather than holding its own.
- Back-end provider (RSP): a technical operator a registry may hire to run the registry platform on its behalf.
- WHOIS / RDAP: lookup services that reveal the registrant, registrar and registry tied to a domain — see what is WHOIS.
How do money and data flow between them?
The chain runs top to bottom. ICANN accredits registrars and contracts registries. Each registry sets a wholesale price and the rules for its TLD. A registrar adds a retail margin and sells to the registrant, then passes the registration data up to the registry via EPP so the name resolves. When you look a domain up in WHOIS or RDAP, you see exactly these layers: who holds it (registrant), who sold it (registrar) and who operates the extension (registry).
Don’t confuse the registrar with the registry
Your domain is registered through a registrar but operated within a registry’s TLD. If you transfer your domain to a different registrar, the registry — and your extension — stays the same. The registrar is the relationship you manage; the registry is the infrastructure underneath it.
★ Key takeaways
- ICANN coordinates and sets policy; via IANA it maintains the root zone — it never sells domains.
- A registry is the wholesale operator of a TLD — Verisign runs
.comand.net. - A registrar is the accredited retailer you buy from; it talks to the registry via EPP.
- The registrant is you, the holder of the domain.
- Flow: ICANN accredits → registry sets wholesale price & rules → registrar adds margin & sells → registrant. WHOIS/RDAP shows all three.
Frequently asked questions
What is the difference between a registry, a registrar and a registrant?
What is the Verisign registry?
Verisign is the registry operator for the .com and .net top-level domains. It runs the authoritative database and name servers for those TLDs, and it also operates two of the internet’s root servers and the root zone maintainer function.
What does ICANN do in the DNS?
ICANN is the non-profit that coordinates the domain name system and sets policy. It accredits registrars and contracts with registries, and through its IANA function it maintains the root zone, the master list of all TLDs. ICANN does not sell domains itself.
Who do I actually buy a domain from?
You buy from a registrar, the accredited retailer such as GoDaddy, Namecheap or Cloudflare. The registrar manages your account and communicates with the registry on your behalf using the EPP protocol. You never deal with the registry directly.
How does money flow from registrant to registry?
ICANN accredits registrars and contracts registries. The registry sets a wholesale price and rules for its TLD; the registrar adds a retail margin and sells to the registrant. A reseller tier may sit under a registrar, and a registry may use a back-end provider to run the technical platform.
Where do WHOIS records fit in?
WHOIS, and its modern successor RDAP, are lookup services that show the registrant, the registrar and the registry associated with a domain. They let anyone see who manages and holds a given name, subject to privacy rules.
Sources & further reading
- ICANN — What does ICANN do? (policy and coordination role)
- ICANN — Accredited Registrar Directory
- Verisign — .com registry operator
- Related: registry vs registrar, what is a domain registrar, how to register a domain name