239

ICANN charges 18¢ per domain name registered regardless of its extension, but I pay $10 for a domain name per year with my registrar.

What do domain name registrars do for its customers to justify this extra $9.82?

Is there something that they do for our domain names other than registering it with ICANN?

I just read about the 7 people who hold the ICANN database key and got a little bit curious to know what the domain name servers do for us to justify this extra amount (12 times the actual fee)?

11
  • 3
    Yes that's screwed up I can buy any .COM domain for 1 dollar and renew it for $5 for a whole extra year. you just need to do the right google searches before buying a domain!.
    – SSpoke
    May 6, 2014 at 23:56
  • 4
    @ColeJohnson You know why many cheap hosts charge less than $10? Because they will turn around & sell your user info for marketing nonsense or up-sell you on basic system functionality that $10+ registrars give you for free. You get what you pay for. May 7, 2014 at 1:28
  • 5
    The last time I bought a $2.50 domain, the renewal rate was at $38 per year after that. So, I rather pay my $10 a year and know that is the price which it is going to be for the life of the domain.
    – Traven
    May 7, 2014 at 5:36
  • 3
    @SSpoke The actual price is around $10 a year plus or minus a dollar. Some web hosting companies offer a discount on the domain (or even a free domain) if you host with them. The actual price is bundled with the hosting so you don't see it. May 7, 2014 at 14:24
  • 3
    @SSpoke well coupon codes dont represent actual prices. They are meant to be a promotional discount price. If you are like me and have more than 10 domains you wouldn't be able to use coupons for each one without wasting loads of time. May 8, 2014 at 19:54

7 Answers 7

180

ICANN lists a set of qualifications that registrars must be able to perform. Among these are:

  • Capabilities for registration and transfer of domains
  • Requirements for security and scalability
  • Backups
  • 5 employees
  • Carry insurance
  • Have cash in the bank

ICANN maintains a list of hundreds of accredited registars. All these registrars have to compete with each other on price, customer service, and brand recognition. Given the stiff competition, I would say that fees that registrars charge are determined by the market. If a registrar could meet ICANN's requirements and offer domain names for significantly less, then one would do so.

As Matt Nordhoff points out, the registry itself also gets a substantial share of the money you pay for a domain name. For example when you register a $10 .com domain, the fee is split:

  • ICANN: $0.18
  • Verisign, Inc. -- the .com registry: $7.85
  • 3% credit card processing fee: $0.30
  • Your registrar: $1.67

High prices charged by registries are likely because of lack of competition. There have only been a handful of registries, and of those, the .com registry has been the most popular by far. In the last year ICANN has created many new top level domains run by different companies. They have done so partly in the hope that it will increase competition and drive down prices. It is unclear at this point whether that will work. The costs that new registries must pay to ICANN to apply are very steep. That may prevent any of them from being able to offer low prices on the domain names in their registry.

12
  • 4
    Your registrar's payment processor -- what, $0.25 or $0.50? Your registrar itself is barely makin' a buck. May 7, 2014 at 10:57
  • 3
    why .xxx domain is so expensive everywhere? does it mean that all registrars agree to sell it at high price or ICANN sells them more expensive than regular ones?
    – Templar
    May 7, 2014 at 19:19
  • 4
    What exactly they do other than directing the users who type mywebsite.com to the webhost having specefic ip address? But this is done by ICANN. What is the .com registry doing here to have this major revenue share?
    – Indra
    May 7, 2014 at 21:28
  • 6
    @IndrajithIndraprastham No, the registry operates the .com (com.) nameservers. ICANN and friends operate the root (.) servers (which tell you "I dunno what mywebsite.com. is. Go ask the com. nameservers. Here's a list."). So they're both involved. As for why they get so much money, I don't know. Some combination of "it's expensive" and "their lobbyists are really awesome" I imagine. May 7, 2014 at 22:30
  • 6
    All the price-gouging aside, there's a good reason for domain registrations to cost a significant amount. Prices slow down speculative domain squatters -- people who register lots of domains only intending to resell them. If domains were free, or half a dollar, the squatting problem would be worse.
    – O. Jones
    Jun 18, 2016 at 15:04
140

As other answers have said, large portion of your money goes to Verisign. Verisign is essentially government sponsored monopoly over .com and .net domains. You may ask how did that happened when US supposed to so despise monopolies?

Here's how:

Early on registries were free, funded by government and run by InterNIC. Then the government decided to privatize it. The contract to manage .com registry was granted to a company called Network Solutions, Inc (NSI). At that time the US Government actually paid $5.9M to NSI to do administration but then NSI managed to convince them that people should be charged to cover the cost instead. Eventually Verisign bought Network Solutions and become the entity which manages the .com registry.

Everyone was starting to realize that NSI/Verisign was becoming a monopoly for an important part of the modern economy. ICANN was formed in 1998 and chartered to introduce competition in this area. But instead they ended up doing almost exactly the opposite in the next series of events.

Early in 2003 Verisign introduced a service called Site Finder which redirected users to a search engine if the domain didn't exist. ICANN said this was "overstepping the contract terms". Verisign shutdown the service but also sued ICANN for not being allowed to bring any improvements. Eventually ICANN had to settle with Verisign and the prize of the settlement was that Verisign would be awarded contract renewal without any bidding plus the right to raise prices without showing cost justifications. There were even terms that indicated Verisign can continue its monopoly for the long term. If you ask me this is blunder and incompetence by ICANN at mega scale.

Industry was furious. Lot of people commented on ICANN's proposal of settlement by saying that .com registry is not the property that ICANN owns to leverage in settlements. Others said no other government agency knowingly consented to unchecked price increase without cost justification. But it was all in vain and ICANN directors voted 9-5 in favor of settlement.

“We are bitterly disappointed, but we’re not giving up yet. It’s simply a bad deal for the industry and registrants everywhere,” - Bob Parsons, CEO and Founder of GoDaddy.com.

Due to industry outrage, the US Department of Commerce had to intervene and eliminate the clause for Verisign's right to increase prices by 7%. You can say that Verisign showed benevolence for not increasing prices to what was already considered ridiculous.

In cases like this, typically competitors bring antitrust lawsuits. It happened against Verisign in 2010 but they escaped without a bruise because the organization CFIT which had filed this case wasn't considered a competitor or financially injured. It also surprises me that real competitors haven't come forward against Verisign to bring a large scale antitrust suit.

So when you pay that $10, it's ICANN's massive blunders of the last decade to allow Verisign to continue their absolute monopoly. Verisign has benefitted dearly with this. They have $2 billion in cash and $1 billion of yearly revenues from all the payments you hand out to them. Verisign's financials indicate that this is their highest margin business.

One light at the end of the tunnel is that US government has announced plan to relinquish the control of Internet which means ICANN might not have authority to hand out monopolies any longer. Their stock took big hit when US government announced this.

10
  • 8
    When I registered my first domain in 1996 with Internic, it cost $35 per year. For which I had to physically mail in a check. May 9, 2014 at 19:40
  • 2
    Are there any "rules" preventing private entities from starting their own namespace on a massively large, public scale? Essentially, a root grey market (RGM) which replaces all the root hints that point to ICANN. This is just a hypothetical question, not one of practicality that would have to consider grey market registrars, registries, scale, etc. May 10, 2014 at 20:13
  • 2
    When the public is abused enough from not allowing free market forces to run, that public could venture off and create a free underground domain name space. In fact, the two namespaces could be easily bridged by allowing the RGM -- see previous comment for context -- to divert DNS "questions" to the real roots for any TLDs not recognized in the RGM. The DNS protocol already allows for this double-root questioning to work since each question is for the FQDN. May 10, 2014 at 20:20
  • 1
    It's interesting that ICANN (Internet Corporation for Assigned Names and Numbers) is the successor to IANA (Internet Assigned Numbers Authority). IANA was great. It was run as a truly benevolent dictatorship by its director Jon Postel of blessed memory. Dr. Postel died in October 1988, and there was a scramble to cover the gap. There's a lesson here about graveyards being full of indispensable people. If you have a responsible job, work yourself out of it, or a bunch of greedy lawyers will do that for you.
    – O. Jones
    Jun 18, 2016 at 15:00
  • 1
    Oops, Jon Postel died in October 1998.
    – O. Jones
    Jun 18, 2016 at 15:06
60

ICANN and your registrar are not the only parties involved. There is also the registry, the organization contracted by ICANN to operate the TLD in question. The bulk of the revenue is actually going to them. The .biz, .info and .org registries, for example, all charge over $8. Verisign, who operates several major TLDs, was famously forced to stop increasing .com prices in 2012, leaving them at $7.85. They're still allowed to raise prices of their other TLDs, though: .net was raised to $5.62 last year, and .name to $6.60.

On the other hand, I suspect the story is different for all those new $50-100 domains. The registries charge a lot of money, and the registrars probably mark them up, too. I bet they're both raking in the dough.

Edit, 2022: Verisign can and is raising .com prices again.

8
  • 10
    That's a good, informative answer, but I guess that raises the further question ... what does the registry do that justifies its cut?
    – jawns317
    May 7, 2014 at 10:18
  • 1
    @jawns317 it's important to recoup initial and ongoing costs, such as the $185k registration fee, adhering to all standards set forth by the ICANN, and ensuring the company is in a stable position to maintain the TLD for years to come. Doesn't justify $100/domain prices, but it's a great cash cow none-the-less.
    – BlueBuddy
    May 9, 2014 at 4:51
  • 3
    @IndrajithIndraprastham - because they control who your computer looks to for resolving .com. Domain names are resolved top down. It starts at the root domain (.) which I can runs and then works backwards. So for example, to resolve www.google.com, "." which is run by ICANN is asked who "com" is. It says that "com" is Verisign, so then Verisign's "com" server is asked who is "google" and verisign says, "Google Inc" and then Google Inc's server is asked who is "www" and it responds by giving out an IP address for a server that Google's homepage is running on. May 9, 2014 at 14:59
  • 2
    You could subvert that entirely with if you controlled the root though. If "." suddenly started saying "com" belonged to Mr.Bad Attacker, then they could say that every domain points to whatever they want because they would effectively control what DNS servers are authoritative for everything. May 9, 2014 at 15:00
  • 2
    @ AJ Henderson: I got it now. But ICANN is a non profitable organization. But verisign (.com) registry is not? How can they become the monopoly over .com domains. Who gave them that right? One more thing, (.) root server is doing the same thing as .com registry and their cut is ($0.18) and the Verisign's is $7.5. Are these registries doing something other than that to justify this cut?
    – Indra
    May 9, 2014 at 16:39
12

ICANN doesn't register domain names

Your question assumes that the amount ICANN charges is a 'registration fee' and that you (or anyone else for that matter) can register "directly from ICANN" - which is simply not true.

Think of it as a small tax - for each TLD there is a registry that handles the actual registration, but to support the top-level infrastructure (that doesn't even keep a list of what not-top-level domain names exist, i.e., does not register the domains), each registry pays some amount to ICANN. To make it "fair", it's calculated in proportion to the domain names they have, and it seems that it comes out to $0.18 per domain.

That $0.18 doesn't in any way relate to the cost or price of registration - it's a small "infrastructure fee" for the "umbrella organization" that's included in the total cost.

4

Why do some top level domains cost considerably less than others?

Top level domains such as .com, .net and .biz have fixed wholesale prices negotiated between the registry and the non-profile Internet Corporation for Assigned Names and Numbers (ICANN), which is kinda like a domain regulator

The pricing of older generation TLD domains have a limit what they can be sold for and this limit is set by ICANN which is why some domains hardly ever move in price. However it should be noted that this cap does not include already purchased domains that you often see at auction for thousands of dollars.on.

Newer gTLD's domains such as .club, .sexy and .security have no ICANN limitations on how much a wholesaler can charge, this also applies to two letter country domains such as .us and .ca.

Whom are these Domain Wholesalers?

Wholesalers is just another term for domain registry, the registry is not to be confused with a registrar, for example Nominet is for registry for ccTLD domains in the UK. Nominet does not sell domains directly to customers, they are sold through registrars, it is Nominet who set the cost of the domain under the agreement with domain regulator.

VeriSign is the registry for .com and are limited by ICANN how much they can charge, but they have many other top level domains that may not have the same agreement.

Where does my money go?

  1. Domain Registrar
  2. Payment Fees (Debit, Credit, PayPal etc.)
  3. Domain Registry / Wholesaler
  4. Domain Regulator

What percentage goes to the regulator, registry and registrar?

The percentage of the sale of each domain varies because it has variables such as:

  • ICANN fee agreement with the registry
  • Registry fee agreement with the registrar.

It's impossible to know exactly how much the registrar makes because often this is inside only information, some registrars strike better deals than others depending on the volume of sales they expect to meet, but what can be said for certain is that the registry will receive the most money and net profit will only be made once the sales exceed the cost of their application and yearly regulator fees.

It's worth pointing out that gTLD domains generally cost more because the application for such domains run into the £250,000+ excluding the annually fees.

1
  • Few nitpicks: .COM/.NET prices are a specific cases, and things just changes with the november renewal. Some registries do sell directly to end customers (ex: .DE) and some do not even have resellers (ex: .GT). Registrars have all the exact same price from registries, they can not negotiate deals, outside of promotions or discounts but that apply to all of them (if you accept they all play by the rules of course). Or for new 2012 gTLDs the fee was USD$ 185 000 exactly, just to apply (and then many other fees of course). Dec 28, 2018 at 17:05
1

This question isn't specific to domain registrars, this is a business related question. If X costs Y why do I pay Z?

The answer is simple, registrars are generally multi-employee salary paying organisations. They must meet certain criteria and pay fees for ICANN accreditation. They must invest in infrastructure, websites, helplines, etc.

All of this costs money, and until you buy a domain that is money the registrar has invested at their own risk. Thus they must charge you more to offset the cost and profit enough so that the input has been worthwhile.

If you feel you have found a gap in the market and think you could offer the same services for less then you should research it, see what your outgoings will be and how many domains you would have to sell to make a profit. You might be surprised how competitively priced they really are, if you are not surprised then congratulations you have just found what is likely to be a profitable business.

2
  • 1
    There is something called registry. Eg: .com registry. They are actually costing you this amount. Their cut is $7.86 for .com domain. Verisign is a private company which is now the .com registry. Domain name registrar's cut is only $1.87 . Read the above answers.
    – Indra
    May 11, 2014 at 15:32
  • @IndrajithIndraprastham That doesn't change my answer whatsoever... the registrar is still factoring in profit and their costs, that falls under the etc in their costs. Don't get hung up on specific amounts. This is just the nature of any business. May 11, 2014 at 18:31
1

You have got a lot of useful replies but it seems no one addressed this line in your question:

I just read about the 7 people who hold the ICANN database key

This is completely not related to any fact.

First there is no "ICANN database". As explains in other replies, ICANN does not have an operational day to day role in domain name operations. When you buy a domain name, you exercise various services at registrars and registries, but ICANN does nothing there, it just have a "financial" role and as regulator, accredits companies, etc.

When speaking about keys, I think you are referencing articles such as https://www.theguardian.com/technology/2014/feb/28/seven-people-keys-worldwide-internet-security-web and many others. They are mostly very sensational, including in their title, for no reason except selling papers.

They are trying to explain complicated technical concepts (around DNSSEC, see below) but do so in so many gross over simplifications that the end result is completely meaningless.

Since it is not the core of your question, let us here just try to summarize the issue:

  • to secure DNS resolution, a new protocol (an extension in fact) was invented, which is called DNSSEC
  • DNSSEC uses cryptographic keys (the same kind of the ones used for certificates when you browse HTTPS websites, etc.) to authenticate DNS answers so that a resolver can detect if there is an attack on a domain name
  • DNSSEC works with a chain of trust, exactly like in the HTTPS world with CAs; this means that each level of the DNS tree has a set of keys
  • so that extends to the root (.) which is the mother or father of everything, starting with TLDs
  • the root of the DNS tree has keys that needs to be changed twice per year; this is a policy issue, not a technical one; it is a compromise dictated by the wish to both change cryptographic materials to reduce the window of opportunities for attackers, and also to have "ceremonies" frequent enough so that people are well-trained for them, including if/when it will be needed to conduct them in an emergency
  • the ceremony taking place twice per year to change these keys involves many people and many processes, with a lot of auditing
  • to make it short, no the Internet is not at the mercy of 7 people that could do anything they want and disrupt things. Each one by themselves have basically no power at all. They just need to remember their passwords and be able to be at some specific location once or twice per year to participate in the ceremonies, with many other people attending it.

Also these people are not paid by ICANN, at most their travel costs are reimbursed.

If you want a non sensational description of things and a technically correct one, you can read this article: https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/

As for the key holders specifically you will be able to read this:

There are only 14 available Crypto Officers in the world (7 are affiliated with each location), and at least three of them must attend the ceremony.

[..]

Each of these participants can only perform certain parts of the ceremony. Their roles are divided in a way that ensures less than a 1:1,000,000 chance that a group of conspirators could compromise the root-signing key, assuming a 5% dishonesty rate (yes, that’s formally in the specification) amongst these individuals.

[..]

The first four of these individuals are ICANN staff members, while the three crypto officers are trusted volunteers from the Internet community. Verisign also plays an important role, as they are the root zone maintainer responsible for generating the root zone-signing key that is signed during the ceremony. In addition, the entire procedure is audited by two Big Four auditing firms that are not associated with either Verisign or ICANN.

Not the answer you're looking for? Browse other questions tagged or ask your own question.