Verisign

Verisign, Inc. is a United States-based internet infrastructure company headquartered in Reston, Virginia. Its principal business is the operation of authoritative domain-name registries and associated DNS infrastructure, especially the global .com and .net top-level domains. The company also operates the .name and .cc registries, provides registry and technical services for selected sponsored domains, and maintains infrastructure used by the wider Domain Name System. The company was established in 1995 as a spin-off from RSA Security’s certification-services activities. Its original business centered on digital certificates, certificate authority services, public-key infrastructure and online trust for electronic commerce. During the late 1990s and early 2000s, Verisign became one of the most prominent certificate authorities on the internet. Its strategic direction changed substantially after the 2000 acquisition of Network Solutions, which brought control of important generic top-level-domain registry operations. Domain naming subsequently became the company’s core business. The Network Solutions transaction gave Verisign responsibility for the wholesale registry layer rather than the consumer-facing registrar layer of domain registration. Registries maintain authoritative databases and zone files, while registrars sell registrations to customers. Verisign sold the Network Solutions retail registrar business in 2003 but retained the registry operations. It also relinquished operation of .org during the restructuring of the domain-name market, while securing continued responsibility for .com and later retaining .net. Verisign’s infrastructure role extends beyond registry databases. It operates the A and J root-server instances, two of the thirteen named root-server systems, and participates in root-zone maintenance and distribution processes. These systems sit at the top of the DNS hierarchy and help resolve internet domain names. The company’s registry platforms are designed for high availability and are supported by geographically distributed data-center and network arrangements. The company progressively narrowed its portfolio during the 2000s and 2010s. In 2010 it sold its authentication business, including SSL certificates, public-key infrastructure, trust services and VIP authentication, to Symantec for approximately $1.28 billion. Later, in 2018, customer contracts associated with several security services—including DDoS protection, managed DNS, DNS Firewall and fee-based recursive DNS—were transferred to NeuStar. These transactions left domain-name registry services and selected internet infrastructure activities as Verisign’s central focus. Verisign has continued to operate under agreements involving ICANN and other registry sponsors. Its role in the .com and .net ecosystems has made it a significant participant in debates over registry contracts, pricing, competition and internet governance. The company’s position as a registry operator differs from that of retail registrars such as GoDaddy: Verisign generally supplies the underlying registry infrastructure, while registrars interact directly with registrants. Today, Verisign’s identity is principally that of a specialized, globally important infrastructure operator rather than a consumer cybersecurity brand. Its services are largely invisible to end users, but they support domain registration, DNS resolution, root-zone operations and the availability of internet naming systems across many markets.

Verisign began in 1995 as a spin-off of RSA Security’s certification-services business. It was created to provide digital authentication and trust services for electronic commerce, using licenses to RSA cryptographic patents and a time-limited non-compete arrangement. Its early products included digital certificates and public-key infrastructure. Before the later sale of the authentication division, Verisign had become one of the world’s largest certificate authorities. A decisive change came in 2000, when Verisign acquired Network Solutions. The transaction brought the registry operations associated with .com, .net and .org under Verisign’s control and established domain naming as the company’s most important business. Following the creation of ICANN’s competitive registrar system, the registry and retail registrar functions were separated. Verisign sold the customer-facing Network Solutions registrar business in 2003, retaining the wholesale registry infrastructure. In the same period, it transferred operation of .org to another operator while preserving its strategic position in .com. Verisign also became involved in the expansion and governance of the DNS. It operates the A and J root-server instances, generates the root-zone file and supports the distribution of approved root-zone changes. Its registry portfolio has included .com, .net, .name and .cc, as well as technical or backend roles for domains such as .edu and .jobs. It formerly operated .gov and .tv. The company encountered several controversies during this period. In 2001 it mistakenly issued two code-signing certificates to someone posing as a Microsoft employee; the certificates were later revoked and Microsoft issued a security response. In 2002, a lawsuit challenged Verisign’s marketing practices in domain transfers. In 2003, Verisign introduced Site Finder, which redirected queries for unregistered .com and .net names to a search page. After ICANN challenged the service as outside the registry agreement, Verisign shut it down, though it subsequently pursued litigation concerning the scope of permissible registry services. From 2010 onward, Verisign reduced its exposure to consumer-facing authentication and security products. Symantec acquired the authentication division in 2010, including SSL certificates, PKI and related trust services. In 2018, NeuStar acquired contracts for several network-security services. These decisions reinforced Verisign’s concentration on registry operations, DNS availability and related infrastructure. Verisign moved its headquarters from Mountain View, California, to Northern Virginia, completing its relocation to Reston in 2011. The company operates a distributed infrastructure that includes data centers and network locations intended to support continuity and resilience. In 2016, oversight of the DNS root zone transitioned from the U.S. Department of Commerce to ICANN. Although the transition initially created uncertainty for Verisign, ICANN subsequently retained the company as root-zone maintainer. Verisign remains a specialized infrastructure company whose services underpin a substantial portion of global internet naming.

• 2023

  Verisign loses .gov operating role

  [1]Verisignen.wikipedia.org

  CISA selected Cloudflare to replace Verisign as .gov registry operator.

• 2018

  Security-service contracts transferred to NeuStar

  [1]Verisignen.wikipedia.org

  NeuStar acquired contracts for several Verisign network-security and DNS services.

• 2016

  DNS oversight transition

  [1]Verisignen.wikipedia.org

  The U.S. government ended its direct role in DNS oversight, with ICANN retaining Verisign for root-zone maintenance.

• 2011

  Headquarters moved to Reston

  [1]Verisignen.wikipedia.org

  Verisign completed its move from California to Reston, Virginia.

• 2010

  Authentication division sold to Symantec

  [1]Verisignen.wikipedia.org

  The sale transferred SSL, PKI, trust and VIP authentication activities to Symantec.

• 2005

  Verisign retains .net registry

  [1]Verisignen.wikipedia.org

  ICANN selected Verisign to continue operating the .net top-level-domain registry.

• 2003

  Network Solutions retail business sold

  [1]Verisignen.wikipedia.org

  Verisign divested the consumer-facing registrar business while retaining the wholesale registry operation.

• 2000

  Acquisition of Network Solutions

  [1]Verisignen.wikipedia.org

  Verisign acquired Network Solutions, gaining important domain-registry operations and making internet naming its central business.

• 1995

  Company founded as RSA-related spin-off

  [1]Verisignen.wikipedia.org

  Verisign was established from RSA Security’s certification-services business to provide digital authentication and trust services for internet commerce.

Critical, neutral and highly resilient internet naming infrastructure provider

• Domain registry

  .com

  Verisign operates the authoritative registry for the .com generic top-level domain. Registrars use this wholesale registry to create and maintain .com domain registrations for customers worldwide. The service includes registry databases, zone-file production, DNS publication and operational systems designed for continuous availability.

• Domain registry

  .net

  The .net registry is one of Verisign’s core naming assets. It supports registrations through accredited registrars and provides the authoritative data and DNS infrastructure required for .net domains to resolve across the internet.

• Country-code domain registry

  .cc

  Verisign operates the registry for .cc, the country-code top-level domain associated with the Cocos Islands. Its role covers the underlying registry and DNS infrastructure rather than ordinary retail registration relationships.

• Internet infrastructure

  Root-server infrastructure

  Verisign operates the A and J root-server instances and supports root-zone maintenance and distribution. These systems serve the highest level of the DNS hierarchy and are distributed using anycast and other resilience measures.

• Registry technology

  Registry backend services

  Verisign provides technical registry services for selected sponsored or externally governed top-level domains, including backend systems associated with .edu and .jobs. These services can include zone-file maintenance, hosting and DNS operations.

• 2010

  Network breach and delayed disclosure

  Verisign later reported repeated breaches of its network during 2010. It stated that the DNS infrastructure was not compromised, but observers criticized the delayed disclosure and the limited information made public.

  Source

• 2003

  Site Finder controversy

  Verisign launched Site Finder to redirect requests for nonexistent .com and .net names to a search service. ICANN disputed whether the service was permitted under Verisign’s registry agreements, and Verisign discontinued it before pursuing litigation over registry-service authority.

  Source

• 2001

  Erroneous Microsoft code-signing certificates

  Verisign mistakenly issued two Class 3 code-signing certificates to an individual claiming to represent Microsoft. The certificates were later revoked, and Microsoft issued a special security update to address the risk.

  Source

Read more

• 2018

  Transfer security-service customer contracts to NeuStarM&A

  Background

  Verisign continued simplifying its portfolio after the authentication-business divestiture.

  Action taken

  Contracts for DDoS protection, managed DNS, DNS Firewall and fee-based recursive DNS services were transferred to NeuStar.

  Aftermath

  Verisign’s remaining emphasis shifted further toward naming services and registry infrastructure.

  Source

• 2010

  Sell authentication business to SymantecM&A

  Background

  Verisign sought to narrow its portfolio around domain naming and core internet infrastructure.

  Action taken

  It sold SSL certificate, PKI, trust, VIP authentication and related activities to Symantec.

  Aftermath

  The transaction materially reduced Verisign’s role as a certificate authority and reinforced its infrastructure focus.

  Transaction value. approximately $1.28 billion (2010)

  Source

• 2003

  Separate registry and registrar activitiesStrategy

  Background

  ICANN’s competitive registrar framework required a clearer separation between the wholesale registry and consumer-facing registrar functions.

  Action taken

  Verisign sold the Network Solutions retail registrar business and retained the registry operation.

  Aftermath

  Verisign concentrated on wholesale naming infrastructure rather than direct retail domain sales.

  Source

• 2000

  Acquire Network SolutionsM&A

  Background

  Network Solutions controlled important domain-name registry operations, making the acquisition strategically significant for Verisign’s transition from certificates toward internet naming.

  Action taken

  Verisign acquired Network Solutions and assumed its registry role for major generic top-level domains.

  Aftermath

  The registry business became the foundation of Verisign’s modern operating model, while the retail registrar business was later divested.

  Source

1. 1Verisignen.wikipedia.org
2. 2Verisign corporate websiteverisign.com