Jump to content

Top-level domain

From Wikipedia, the free encyclopedia

Examples of the over 1,500 TLDs
Example domain Type Sponsoring institution
.arpa Infrastructure Internet Architecture Board; restricted[clarification needed][1]
.blue Generic Identity Digital Limited; unrestricted[clarification needed][2]
.ovh Generic OVH SAS; run by AFNIC, unrestricted[3]
.name Restricted generic VeriSign Information Services, Inc.; unrestricted[4]
.ac Country-code Internet Computer Bureau; unrestricted[5]
.zw Country-code Postal and Telecommunications Regulatory Authority of Zimbabwe;run by TelOne Zimbabwe; unrestricted[6]
.aero Sponsored Société Internationale de Télécommunications Aéronautiques; unrestricted[7]
.ไทย Internationalized country-code THNIC[8]

A top-level domain (TLD) is one of the domains at the highest level in the hierarchical Domain Name System of the Internet after the root domain.[9] The top-level domain names are installed in the root zone of the name space. For all domains in lower levels, it is the last part of the domain name, that is, the last non-empty label of a fully qualified domain name. For example, in the domain name www.example.com, the top-level domain is .com. Responsibility for management of most top-level domains is delegated to specific organizations by the ICANN, an Internet multi-stakeholder community, which operates the Internet Assigned Numbers Authority (IANA), and is in charge of maintaining the DNS root zone.


Originally, the top-level domain space was organized into three main groups: Countries, Categories, and Multiorganizations.[10] An additional temporary group consisted of only the initial DNS domain, .arpa,[11] and was intended for transitional purposes toward the stabilization of the domain name system.


As of 2015, IANA distinguishes the following groups of top-level domains:[12]

Countries are designated in the Domain Name System by their two-letter ISO country code;[13] there are exceptions, however (e.g., .uk). This group of domains is, therefore, commonly known as country-code top-level domains (ccTLD). Since 2009, countries with non–Latin-based scripts may apply for internationalized country code top-level domain names, which are displayed in end-user applications in their language-native script or alphabet, but use a Punycode-translated ASCII domain name in the Domain Name System.

Generic top-level domains (formerly categories) initially consisted of .gov, .edu, .com, .mil, .org, and .net. More generic TLDs have been added, such as .info.

The authoritative list of current TLDs in the root zone is published at the IANA website at https://www.iana.org/domains/root/db/.

Internationalized country code TLDs[edit]

An internationalized country code top-level domain (IDN ccTLD) is a top-level domain with a specially encoded domain name that is displayed in an end-user application, such as a web browser, in its language-native script or alphabet (such as the Arabic alphabet), or a non-alphabetic writing system (such as Chinese characters). IDN ccTLDs are an application of the internationalized domain name (IDN) system to top-level Internet domains assigned to countries, or independent geographic regions.

ICANN started to accept applications for IDN ccTLDs in November 2009,[14] and installed the first set into the Domain Names System in May 2010. The first set was a group of Arabic names for the countries of Egypt, Saudi Arabia, and the United Arab Emirates. By May 2010, 21 countries had submitted applications to ICANN, representing 11 scripts.[15]

Infrastructure domain[edit]

The domain .arpa was the first Internet top-level domain. It was intended to be used only temporarily, aiding in the transition of traditional ARPANET host names to the domain name system. However, after it had been used for reverse DNS lookup, it was found impractical to retire it, and is used today exclusively for Internet infrastructure purposes such as in-addr.arpa for IPv4 and ip6.arpa for IPv6 reverse DNS resolution, uri.arpa and urn.arpa for the Dynamic Delegation Discovery System, and e164.arpa for telephone number mapping based on NAPTR DNS records. For historical reasons, .arpa is sometimes considered to be a generic top-level domain.[16]

Reserved domains[edit]

A set of domain names is reserved[17][18] by the Internet Engineering Task Force as special-use domain names per authority of Request for Comments (RFC) 6761. The practice originated in RFC 1597 for reserved address allocations in 1994, and reserved top-level domains in RFC 2606 of 1999. RFC 6761 reserves the following four top-level domain names to avoid confusion and conflict.[19] Any such reserved usage of those TLDs should not occur in production networks that utilize the global domain name system:

  • .example – reserved for use in examples
  • .invalid – reserved for use in invalid domain names
  • .localhost – reserved to avoid conflict with the traditional use of localhost as a hostname
  • .test – reserved for use in tests

RFC 6762 reserves the use of .local for link-local host names that can be resolved via the multicast DNS name resolution protocol.[20]

RFC 7686 reserves the use of .onion for the self-authenticating names of Tor onion services. These names can only be resolved by a Tor client because of the use of onion routing to protect the anonymity of users.[21]

ICANN proposed the use of .internal on 2024-01-24[22] with request for feedback. In 2017 an Internet-Draft draft-wkumari-dnsop-internal-00 already proposed reserving the use of .internal for "names which do not have meaning in the global context but do have meaning in a context internal to their network", and for which the RFC 6761 reserved names are semantically inappropriate.

Historical domains[edit]

In the late 1980s, InterNIC created the .nato domain for use by NATO.[citation needed] NATO considered none of the then-existing TLDs as adequately reflecting their status as an international organization. Soon after this addition, however, InterNIC also created the .int TLD for the use by international organizations in general, and persuaded NATO to use the second level domain nato.int instead. The nato TLD, no longer used, was finally removed in July 1996.[citation needed]

Other historical TLDs are .cs for Czechoslovakia (now using .cz for Czech Republic and .sk for Slovakia), .dd for East Germany (using .de after reunification of Germany), .yu for SFR Yugoslavia and Serbia and Montenegro (now using .ba for Bosnia and Herzegovina, .hr for Croatia, .me for Montenegro, .mk for North Macedonia, .rs for Serbia and .si for Slovenia), .zr for Zaire (now .cd for the Democratic Republic of the Congo), and .an for Netherlands Antilles (now .aw for Aruba, .cw for Curaçao and .sx for Sint Maarten). In contrast to these, the TLD .su has remained active despite the demise of the Soviet Union that it represents. Under the chairmanship of Nigel Roberts, ICANN's ccNSO is working on a policy for the retirement of ccTLDs that have been removed from ISO 3166.

Proposed domains[edit]

Around late 2000, ICANN discussed and finally introduced[23] .aero, .biz, .coop, .info, .museum, .name, and .pro TLDs. Site owners argued that a similar TLD should be made available for adult and pornographic websites to settle the dispute of obscene content on the Internet, to address the responsibility of US service providers under the US Communications Decency Act of 1996. Several options were proposed including xxx, sex and adult.[24] The .xxx top-level domain eventually went live in 2011.[25]

An older proposal consisted of seven new gTLDs: arts, firm, .info, nom, rec, .shop, and .web.[26] Later .biz, .info, .museum, and .name covered most of these old proposals.

During the 32nd International Public ICANN Meeting in Paris in 2008, ICANN started a new process of TLD naming policy to take a "significant step forward on the introduction of new generic top-level domains".[27] This program envisioned the availability of many new or already proposed domains, as well as a new application and implementation process.[28] Observers believed that the new rules could result in hundreds of new gTLDs being registered.[29]

On 13 June 2012, ICANN announced nearly 2,000 applications for top-level domains, which began installation throughout 2013.[30][31] The first seven – bike, clothing, guru, holdings, plumbing, singles, and ventures – were released in 2014.[32]

Rejected domains[edit]

ICANN rejected several proposed domains to include .home and .corp due to conflicts regarding gTLDs that are in use in internal networks.

Investigation into the conflicts was conducted at ICANN's request by Interisle Consulting. The resulting report was to become known as the Name Collision[33] issue, which was first reported at ICANN 47.[34]

Dotless domains[edit]

.org[.] is a node in the DNS tree, just like wikipedia.[org.] and en.[wikipedia.org.]. As such, it has its own DNS records.

Due to the structure of DNS, each node in the tree has its own collection of records, and since top-level domains are nodes in DNS, they have records of their own. For example, querying org itself (with a tool such as dig, host, or nslookup) returns information on its nameservers:

org. IN ANY
org. 21599 IN NS a0.org.afilias-nst.info.
org. 21599 IN NS a2.org.afilias-nst.info.
org. 21599 IN NS b0.org.afilias-nst.org.
org. 21599 IN NS b2.org.afilias-nst.org.

Dotless domains are top-level domains that take advantage of that fact, and implement A, AAAA or MX DNS records to serve webpages or allow incoming email directly on a TLD – for example, a webpage hosted on http://example/, or an email address user@example.[35]

ICANN and IAB have spoken out against the practice, classifying it as a security risk among other concerns.[36] ICANN's Security and Stability Advisory Committee (SSAC) additionally claims that SMTP "requires at least two labels in the FQDN of a mail address" and, as such, mail servers would reject emails to addresses with dotless domains.[35]

ICANN has also published a resolution in 2013 that prohibits the creation of dotless domains on gTLDs.[37] ccTLDs, however, fall largely under their respective country's jurisdiction, and not under ICANN's. Because of this, there have been many examples of dotless domains on ccTLDs in spite of ICANN's vocal opposition.

As of September 2023, that is the case of:

Other ccTLDs with A or AAAA records, as of September 2023, include: .cm, .tk and .ws.

A similar query to org's presented above can be made for ai, which shows A and MX records for the TLD:

ai. IN ANY
ai. 21599 IN A
ai. 21599 IN MX 10 mail.offshore.ai.
ai. 21599 IN NS anycastdns1-cz.nic.ai.
ai. 21599 IN NS anycastdns2-cz.nic.ai.
ai. 21599 IN NS pch.whois.ai.

Historically, many other ccTLDs have had A or AAAA records. On 3 September 2013, as reported by the IETF, they were the following:[38] .ac, .dk, .gg, .io, .je, .kh, .sh, .tm, .to, and .vi.

New TLDs[edit]

Following a 2014 resolution by ICANN, newly registered TLDs must implement the following A, MX, TXT, and SRV apex DNS records – where <TLD> stands for the registered TLD – for at least 90 days:[39]

<TLD>. 3600 IN MX  10      your-dns-needs-immediate-attention.<TLD>.
<TLD>. 3600 IN SRV 10 10 0 your-dns-needs-immediate-attention.<TLD>.
<TLD>. 3600 IN TXT         "Your DNS configuration needs immediate attention see https://icann.org/namecollision"
<TLD>. 3600 IN A 

This requirement is meant to avoid domain name collisions when new TLDs are registered. For example, programmers may have used custom local domains such as foo.bar or test.dev, which would both collide with the creation of gTLDs .bar in 2014 and .dev in 2019. As of September 2023, the only top-level domains with these special apex records are .arab and .music.

While this does create apex DNS records of type A and MX, they do not qualify as a dotless domain, as the records should not point to real servers. For instance, the A record contains the IP, a loopback address (see IPv4 § Addressing), picked as a mnemonic to indicate a DNS-related problem, as DNS uses port 53.[40]


Several networks, such as BITNET, CSNET, and UUCP, existed that were in widespread use among computer professionals and academic users, but were not interoperable directly with the Internet and exchanged mail with the Internet via special email gateways. For relaying purposes on the gateways, messages associated with these networks were labeled with suffixes such as .bitnet, .oz, .csnet, or .uucp, but these domains did not exist as top-level domains in the public Domain Name System of the Internet.

Most of these networks have long since ceased to exist, and although UUCP still gets significant use in parts of the world where Internet infrastructure has not yet become well established, it subsequently transitioned to using Internet domain names, and pseudo-domains now largely survive as historical relics. One notable exception is the 2007 emergence of SWIFTNet Mail, which uses the swift pseudo-domain.[41]

The anonymity network Tor formerly used the top-level pseudo-domain .onion for onion services, which can only be reached with a Tor client because it uses the Tor onion routing protocol to reach the hidden service to protect the anonymity of users. However, the pseudo-domain became officially reserved in October 2015. i2p provides a similar hidden pseudo-domain, .i2p. And Namecoin uses the .bit pseudo-domain.

See also[edit]


  1. ^ "Delegation Record for .ARPA". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  2. ^ "Delegation Record for .BLUE". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  3. ^ "Delegation Record for .OVH". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  4. ^ "Delegation Record for .NAME". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  5. ^ "Delegation Record for .AC". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  6. ^ "Delegation Record for .ZW". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  7. ^ "Delegation Record for .AERO". Internet Corporation for Assigned Names and Numbers. Retrieved 10 November 2015.
  8. ^ "Delegation Record for .ไทย". Internet Corporation for Assigned Names and Numbers. Retrieved 23 February 2017.
  9. ^ Postel, Jon (March 1994). "Domain Name System Structure and Delegation". Request for Comments. Network Working Group. doi:10.17487/RFC1591. Retrieved 7 February 2011. This memo provides some information on the structure of the names in the Domain Name System (DNS), specifically the top-level domain names; and on the administration of domains.
  10. ^ Postel, J.; Reynolds, J. (October 1984). "Domain Requirements". Request for Comments. Network Working Group. doi:10.17487/RFC0920. Retrieved 7 February 2011.
  11. ^ Postel, J. (October 1984). "Domain Name System Implementation Schedule - Revised". Request for Comments. Network Working Group. doi:10.17487/RFC0921. Retrieved 7 February 2011. This memo is a policy statement on the implementation of the Domain Style Naming System in the Internet. This memo is an update of RFC-881, and RFC-897. This is an official policy statement of the IAB and the DARPA.
  12. ^ "IANA root zone database". IANA.org. Internet Assigned Numbers Authority. Retrieved 10 November 2015.
  13. ^ Codes for the Representation of Names of Countries, ISO-3166, International Organization for Standardization. (May 1981)
  14. ^ "ICANN Bringing the Languages of the World to the Global Internet" (Press release). Internet Corporation For Assigned Names and Numbers (ICANN). 30 October 2009. Retrieved 30 October 2009.
  15. ^ "'Historic' day as first non-Latin web addresses go live". BBC News. 6 May 2010. Retrieved 7 May 2010.
  16. ^ ".ARPA Domain". www.iana.org. Retrieved 16 December 2023.
  17. ^ "IANA-managed Reserved Domains". IANA. Retrieved 4 March 2022.
  18. ^ "Special-Use Domain Names". IANA. Retrieved 3 March 2022.
  19. ^ RFC 6761, Special-Use Domain Names, S. Cheshire, M. Krochmal, The Internet Society (February 2013)
  20. ^ RFC 6762, Multicast DNS, S. Cheshire, M. Krochmal, The Internet Society (February 2013)
  21. ^ RFC 7686, The ".onion" Special-Use Domain Name, J. Appelbaum, A. Muffett, The Internet Society (October 2015)
  22. ^ "Proposed Top-Level Domain String for Private Use". ICANN. Retrieved 15 February 2024.
  23. ^ "InterNIC FAQs on New Top-Level Domains". Internic.net. 25 September 2002. Retrieved 28 March 2013.
  24. ^ RFC 3675: .sex Considered Dangerous
  25. ^ "What is top-level Domain | TLD meaning - Namecheap". namecheap.com. Retrieved 26 June 2023.
  26. ^ "(historical) gTLD MoU". Archived from the original on 13 June 2008.
  27. ^ "32nd International Public ICANN Meeting". ICANN. 22 June 2008.
  28. ^ "New gTLD Program". ICANN. 15 June 2009. Archived from the original on 17 June 2009. Retrieved 15 June 2009.
  29. ^ ICANN Board Approves Sweeping Overhaul of Top-level Domains, CircleID, 26 June 2008.
  30. ^ "The Top 10 Proposed New Top Level Domains So Far". Retrieved 12 June 2012.
  31. ^ "Reveal Day 13 June 2012 – New gTLD Applied-For Strings". Newgtlds.icann.org. Archived from the original on 15 June 2012. Retrieved 28 March 2013.
  32. ^ "What the new top-level domains from ICANN mean for you - Digital Trends". Digital Trends. 5 February 2014.
  33. ^ "Name Collision". ICANN Wiki. Retrieved 5 July 2021.
  34. ^ "ICANN 47". ICANN Wiki. Retrieved 5 July 2021.
  35. ^ a b "SSAC Report on Dotless Domains". ICANN. 24 August 2012. Retrieved 14 August 2021.
  36. ^ "IAB Statement: Dotless Domains Considered Harmful". Internet Architecture Board. 2013. Retrieved 14 August 2021.
  37. ^ "Approved Resolutions | Meeting of the New gTLD Program Committee".
  38. ^ Levine, John; Hoffman, Paul (December 2013). "Top-Level Domains That Are Already Dotless". Ietf Datatracker. Internet Engineering Task Force. Retrieved 14 August 2021.
  39. ^ Atallah, Akram (4 August 2014). "Name Collision Occurrence Assessment". ICANN. Retrieved 17 August 2021.
  40. ^ "Name Collision Resources & Information". ICANN. Retrieved 17 August 2021.
  41. ^ "SWIFTNet Mail now available". SWIFT. 16 May 2007. Archived from the original on 29 June 2009. Retrieved 3 January 2010.

Further reading[edit]

External links[edit]