News
ICANN decisions, registry and registrar changes, root-zone and DNS infrastructure events. Every item links the primary source it was written from and says when we last checked it.
Afnic Approved as ICANN Registry Service Provider for New gTLDs
On 18 February 2026 Afnic, the .fr registry, announced its ICANN Registry Service Provider designation, needed to run TLDs from the 2026 round.
News2 min readDENIC: .de DNSSEC Signatures Failed Validation on 5 May 2026
A key rollover in DENIC's new signing system produced signatures validating resolvers rejected; .de names were unreachable for them for about 3 hours.
News2 min readICANN's 2026 New gTLD Round Closed With Over 1,600 Applications
The new gTLD application window closed on 12 August 2026 with more than 1,600 primary applications. What happens next and what it means for you.
News2 min readICANN Proposes Moving the Root KSK From RSA to ECDSA
ICANN took public comment from 3 February to 6 April 2026 on moving the DNS root's key signing key from RSA/SHA-256 to ECDSA: new key in 2027, RSA retired in 2029.
News2 min readRoot Zone KSK Rollover Completes on 11 October 2026
From 11 October 2026 the DNS root zone is signed only with KSK-2024 (key tag 38696). Validating resolvers without the new trust anchor will stop resolving. What to check.
News2 min read.com Wholesale Fee Rises to $10.97 on 1 November 2026
Verisign announced on 23 April 2026 that the registry-level wholesale fee for new and renewal .com registrations rises from $10.26 to $10.97 on 1 November 2026.
News3 min readGmail and Yahoo Sender Rules Since February 2024: A Checklist
Since February 2024 Gmail and Yahoo require SPF, DKIM and DMARC from bulk senders, plus one-click unsubscribe and a spam rate under 0.3%. What to check.
News2 min readRDAP Replaced WHOIS for gTLDs on 28 January 2025
Since 28 January 2025 RDAP is the definitive source of gTLD registration data and WHOIS is no longer required. What changed and what to check in your tooling.
News3 min readTLS Certificate Lifetimes Drop to 47 Days by 2029: The Schedule
The CA/Browser Forum voted on 11 April 2025 to cut TLS certificate validity to 200, 100 and then 47 days. The dates, and what site owners should do.