No single company owns the world’s TLDs. ICANN (a non-profit) sets the policy for which extensions exist and how they are run; its IANA function maintains the authoritative root zone — the master list every DNS server trusts; and each individual TLD is operated by a registry (for example, Verisign runs .com). You buy domains from a registrar, which sits between you and the registry.
It is natural to assume that something as important as the domain name system must be owned by one organisation. It isn’t. Control of TLDs is deliberately layered, so that no single party can unilaterally dictate the naming of the entire internet. Understanding those layers makes the whole system far less mysterious.
So who is actually in charge?
Think of it as three distinct jobs, done by three different kinds of body:
| Layer | Who | Job |
|---|---|---|
| Policy | ICANN | Decides which TLDs are created and the rules they follow. |
| Root zone | IANA (an ICANN function) | Maintains the master list and delegates each TLD to its operator. |
| Registry | e.g. Verisign (.com) | Operates one TLD and holds its master database. |
| Registrar | The company you buy from | Sells domains under TLDs to the public. |
| Registrant | You | Holds the right to use a specific domain while it is registered. |
What does ICANN do?
ICANN — the Internet Corporation for Assigned Names and Numbers — is a non-profit that coordinates the internet’s system of unique identifiers. For TLDs, ICANN’s role is policy: it decides the rules under which new extensions can be created, accredits registrars, and runs the programmes (like the 2012 New gTLD Program) that expand the namespace.
Crucially, ICANN works through a multi-stakeholder model: governments, businesses, technical experts and civil society all participate in shaping policy. It does not “run the internet,” and it does not control website content — its remit is naming and numbering, not the wider network.
What is IANA and the root zone?
The IANA function (Internet Assigned Numbers Authority), operated under ICANN, maintains the root zone: the single master file at the very top of the DNS that lists every TLD and points to the registry that operates it. When ICANN approves a new extension, IANA delegates it — adding a record to the root so the rest of the world’s DNS knows where to find it.
The authoritative master file at the apex of the DNS, maintained via IANA, listing every top-level domain and the name servers of the registry that operates it. Every DNS lookup ultimately traces back to it.
This single, coordinated root is what keeps the internet’s naming consistent worldwide — so that .com means the same thing in Tokyo as it does in Toronto. To see how a lookup travels from the root down to a specific domain, read how the DNS hierarchy works.
What is the difference between registries and registrars?
This is the distinction people most often get tangled up in:
- A registry operates an entire TLD. It holds the authoritative database of every domain registered under that extension and runs the TLD’s name servers. Verisign is the registry for
.comand.net; other registries run.org,.shop, country-code extensions, and so on. - A registrar is a company accredited to sell domains under those TLDs to the public. When you register a domain, you do it through a registrar, which then records your registration with the relevant registry.
A simple analogy
If a TLD were a city, the registry would be the land registry that keeps the official record of every plot, and a registrar would be an estate agent licensed to lease those plots to residents. You talk to the agent (registrar); the official record lives with the registry.
For the layer you actually interact with, see what is a domain registrar.
Why does this layered control matter?
The structure has real consequences for anyone who owns a domain:
- Stability. Because one coordinated root underpins everything, names resolve consistently across the whole internet.
- No single point of ownership. Splitting policy, root maintenance and operation across different bodies guards against any one party seizing control of global naming.
- Where to turn. Pricing and registration rules for an extension come from its registry; your account, renewals and support come from your registrar; broad policy questions sit with ICANN. Knowing the layers tells you who is responsible for what.
★ Key takeaways
- No one company owns the TLD system; control is layered on purpose.
- ICANN sets policy; IANA maintains the root zone and delegates TLDs.
- A registry operates one TLD; a registrar sells domains under it to you.
- This structure keeps naming consistent worldwide and prevents any single point of ownership.
Frequently asked questions
Who owns the TLD system?
No single company or government owns it. Policy for the global TLD system is set by ICANN, a non-profit, through a multi-stakeholder process. Its IANA function maintains the authoritative root zone, and each individual TLD is operated by a registry. The system is coordinated, not owned.
Who controls .com?
The .com registry is operated by Verisign under an agreement with ICANN. Verisign maintains the master database of every .com domain and the .com name servers, but it does not set global domain policy — that is ICANN’s role.
What is the difference between a registry and a registrar?
A registry operates an entire TLD and holds the master database for it (e.g. Verisign for .com). A registrar is a company accredited to sell domains under that TLD to the public (e.g. the company you buy your domain from). You deal with a registrar; the registrar deals with the registry. See what is a domain registrar.
Does ICANN run the internet?
No. ICANN coordinates the internet’s unique identifier systems — domain names and IP address allocation — not the content, the cables or the websites. It is a coordination and policy body for naming and numbering, not an operator of the internet itself.
Can a government control a country-code TLD?
Country-code TLDs are delegated to a manager for each territory, and national policy can influence how a ccTLD is run. But the delegation itself is recorded by IANA in the root zone, and ccTLD operators are expected to serve their local internet community responsibly under longstanding principles.