ICANN

The Web Has Become a Content Delivery Network

Cyberattacks, AI scraping and relentless bot traffic have transformed CDNs from performance tools into the Web's defensive gatekeepers, reshaping Internet architecture, governance and control as private intermediaries increasingly determine which requests reach origin servers first.

Call for Participation: DNSSEC and Security Workshop at ICANN87 (21 October 2026)

ICANN is inviting proposals for its DNSSEC and Security Workshop at ICANN 87, offering experts and practitioners a platform to share insights on DNS security, routing security, browser security, and emerging Internet infrastructure challenges.

ICANN Wiki, SHE.africa, AI, and the Integrity of Digital Platforms

As AI increasingly relies on digital archives, the quiet revision of ICANNWiki entries raises broader questions about platform accountability, historical integrity, and whether institutions can reshape the records that future researchers and machines will treat as fact.

The 2024-2026 Root Zone KSK Rollover: Updates and Observations

Roughly a year and a half ago, Verisign and ICANN began the important, multi-year process of updating the cryptographic key that secures the authoritative DNS root zone. This work has been largely invisible to the public, but vital to the security of many everyday online activities.

Who Registers the Domain That Steals Your Data? The Registrar Accountability Gap in India’s DNS Abuse Crisis

India's DNS abuse crisis exposes a registrar accountability gap: malicious domains remain online while vulnerable users bear the cost. Concentrated abuse patterns suggest stronger oversight and faster mitigation could significantly reduce predictable harms nationwide today.

Who Is “the Community”? The Missing Constitutional Question in Multistakeholder Internet Governance

Internet-governance bodies routinely invoke "the community" to legitimize decisions. The Constituent Community Doctrine asks who holds authority, how mandates are conferred, and when institutional claims exceed, distort or outlive the consent on which they rest.

The Question Isn’t Whether the Harm Is Real - It’s Who Should Act

Measuring online abuse can reveal its scale, but not who should intervene. Effective policy must distinguish harm from contractual responsibility, identify the actors best placed to act, and target remedies where they can work effectively.

The gTLD Registrar Market Is Uniform in Rules, Not in Structure

ICANN applies identical rules to every registrar, yet new research reveals a sharply unequal market where seven firms capture half of inflows, renewals dominate activity, and many accreditations barely operate at all in practice today.

What the i2Coalition Article Misses About DNS Abuse

Authors defend research showing malicious domain registrations occur at industrial scale, arguing that blocklist data is reliable and that policymakers must prioritize prevention alongside mitigation to curb cybercriminal exploitation of the domain name market globally.

Continuity Is Not Legitimacy: Why Internet Institutions Need a Governance Stress Test

Internet institutions can remain operational while losing the legitimacy that sustains their authority. A proposed governance stress test distinguishes continuity from legitimacy, helping expose capture, substitution, and accountability failures before institutional crises become irreversible realities.

The Multi-Stakeholder Mirage: How Internet Governance Turned Attendance Into Mandate

Internet multi-stakeholder governance mistakes participation for legitimacy, granting policy processes implied authority without public authorization. As IPv4 becomes capital, operator accountability, not attendance, should define binding decision-making and institutional legitimacy instead of consensus.

What the Interisle Report Reveals, and What It Doesn’t, About DNS Abuse

Interisle's report illuminates malicious registration trends, but its broad blocklist methodology measures different questions than DNS Abuse, complicating conclusions about registry and registrar accountability by conflating reputation signals with actionable domain enforcement decisions for policymakers.

.PK ccTLD Governance Issues and Pakistan’s Digital Future

Pakistan's .pk domain has long been controlled by a private company abroad, raising concerns over digital sovereignty, cybersecurity and accountability. Repeated breaches, offshore infrastructure and weak governance have left a critical national asset exposed and contested.

The 2026 New gTLD Round: A Strategic Framework for Risk Management

The 2026 new gTLD round is less a domain application than a high-stakes contest for digital territory. Contention, objections, opaque evaluations and information gaps can derail applicants long before launch, demanding rigorous strategic preparation.

When AI Writes the Scam: How Artificial Intelligence Is Making DNS Abuse Harder to Detect

Artificial intelligence is transforming phishing and DNS abuse, erasing the linguistic clues that once exposed scams. As attacks become personalised, automated and multilingual, governance frameworks are struggling to keep pace with a rapidly expanding threat surface.