⚠ All the Risk and None of the RevenueLow threat
VeriSign (VRSN) — threat to the moat
A role worth nothing on every day it works and everything on the one day it doesn't, in the wrong direction.
The Root Zone Maintainer function is all responsibility and no revenue, which is fine until something goes wrong.
VeriSign performs the function under an agreement with ICANN and separately operates two of the thirteen root servers holding the authoritative data at the top of the DNS hierarchy.1 The role does not appear as a revenue line because it is not one. What it carries instead is the entirety of the operational risk for a system whose failure would not be confined to .com — it would affect every top-level domain simultaneously.
The asymmetry is total. Nothing good happens to VeriSign because the root zone worked today. A great deal that is bad happens if it does not, including to the argument that VeriSign should keep .com.
There is a governance dimension too. The arrangement dates from the era of explicit U.S. stewardship of the DNS and survived the 2016 transition of the IANA functions to the multistakeholder community. It survived because nobody wanted to move it. That is a durable reason and not a permanent one.
There is no metric here. There is a role that is worth exactly nothing until the day it is worth everything, in the wrong direction.
- ReportedThe Root Zone Maintainer function is performed under an agreement with ICANN, alongside operation of two of the thirteen root servers, and is not disclosed as a revenue line.VeriSign, Inc., Form 10-K for the fiscal year ended 31 December 2025 (SEC, CIK 1014473) — Item 1, Business. VeriSign operates the .com and .net registries under registry agreements with ICANN, and .com additionally under a Cooperative Agreement with the U.S. Department of Commerce (most recently amended by Amendment 35 on 26 October 2018, automatically renewed on the same terms on 30 November 2024 for a successive six-year term, renewing again on 30 November 2030 unless the DOC gives notice). The .com Registry Agreement runs a six-year term that must be renewed or extended by 30 November 2030 and contains a presumptive right of renewal, with ICANN able to terminate or refuse in certain prescribed circumstances; it permits an increase to the Maximum Price of up to 7% over the previous year in each of the final four years of each six-year period, the current period having begun on 26 October 2024. The .net Registry Agreement was renewed on 29 June 2023, runs to 1 July 2029 and permits increases of up to 10% each year. VeriSign remits $0.2575 to ICANN quarterly for each annual .com registration and $0.25 for each .name registration. It also operates .cc under an agreement with the Cocos (Keeling) Islands, operates .name and internationalised gTLDs, provides back-end services for .edu, performs the Root Zone Maintainer function for ICANN and operates two of the thirteen global internet root servers. Retail pricing is established by registrars; VeriSign must provide ICANN-accredited registrars with non-discriminatory access, faces marketing and bundling limits, must submit new Registry Services for ICANN review, and is subject to vertical-integration restrictions that apply solely to .com — obligations it states do not apply to ccTLDs and other gTLDs and may create a competitive disadvantage. Named registry competitors include CentralNic, China Internet Network Information Center (CNNIC), DENIC eG, GoDaddy, Google, Identity Digital, Nominet, Public Interest Registry, Radix and .xyz. Employee headcount 928 (256 cost of revenues, 240 research and development, 432 selling, general and administrative). — FY2025 · publ. 2026-02-05 · source ↗