The Three-Layer Structure: ICANN, Registries, Registrars
Domain registration involves three distinct layers of authority. ICANN (Internet Corporation for Assigned Names and Numbers) is the non-profit policy body that coordinates the domain name system globally — it accredits registrars, delegates TLDs, and sets policies for how registrations work. Registries operate the authoritative databases for individual TLDs. Verisign operates the .com and .net registries, maintaining the zone files that list every registered domain under those TLDs. The Public Interest Registry operates .org. Each registry licenses registrars to sell registrations directly to the public. Registrars — companies like Namecheap, GoDaddy, Cloudflare Registrar, and Google Domains — are the retail layer where end users actually purchase and manage domains.
The Main Roles
| Role | What it does | Example |
|---|---|---|
| ICANN | Sets policy, accredits registrars, delegates TLDs | icann.org |
| Registry | Operates the TLD zone database | Verisign for .com, PIR for .org |
| Registrar | Sells registrations to end users | Namecheap, Cloudflare Registrar, GoDaddy |
| Registrant | The person or organization controlling the domain | A business owner or individual |
| Nameserver | Hosts authoritative DNS records for the domain | DNS provider or hosting platform |
WHOIS and RDAP
WHOIS is the traditional protocol for querying domain registration data — registrant contact information, registrar details, nameservers, registration date, expiry date, and domain status codes. RDAP (Registration Data Access Protocol) is the modern replacement: it returns structured JSON instead of plain text and supports authentication for accessing non-redacted data. Both are queried using the domain name and return the same core registration data. Running whois example.com from a terminal or using a web-based RDAP query at lookup.icann.org shows the current registration state of any domain.
GDPR and similar privacy regulations have significantly changed what WHOIS/RDAP returns for domains registered by individuals in covered jurisdictions. Registrant name, email, phone, and address are typically redacted or replaced with privacy proxy contact information. Legal access to the underlying data requires going through the registrar's legal process.
Domain Privacy and Proxy Services
Most registrars offer domain privacy (also called WHOIS privacy or proxy registration) as an add-on or included feature. When enabled, the registrar's privacy service substitutes its own contact details for the registrant's personal information in the public WHOIS record. Legitimate correspondence is forwarded through the service. This prevents spam, reduces social engineering risk, and keeps personal addresses off public directories. For businesses, privacy protection is still advisable even though the company name is often still disclosed.
Registration Data: What a Domain Record Contains
A complete domain registration record includes: the domain name, registrar name and IANA ID, registration date, updated date, expiry date, registrant contact details (or privacy proxy), administrative and technical contacts, nameservers assigned to the domain, and EPP status codes. Status codes describe the domain's current state — clientTransferProhibited means the registrar has locked the domain against transfer, serverHold means the registry has suspended it, and ok means the domain is active with no restrictions.
Domain Lifecycle
A domain moves through defined states during its life. After a new registration, the domain is active and usable. Approaching expiry, most registrars send renewal reminders. If the domain expires without renewal, it enters a grace period (typically 0–45 days depending on TLD) during which the registrant can still renew at the standard price. After the grace period ends, the domain enters a redemption period (typically 30 days) during which renewal requires a significant redemption fee. After redemption, the domain enters a pending delete state (typically 5 days) before being permanently released and made available for anyone to register. Domain drop-catching services monitor pending delete queues to register high-value domains the moment they become available.
Renewal, Auto-Renew, and Transfer
Domain registration is a lease — you pay annually (or for up to 10 years) and must renew to maintain control. Auto-renew is strongly recommended for any domain that matters; a lapsed payment or expired credit card has caused real businesses to lose critical domains. Domain transfers move a domain from one registrar to another. The process requires: disabling the registrar lock (clientTransferProhibited), obtaining an EPP authorization code (also called an auth code or transfer key) from the current registrar, and submitting it to the gaining registrar. ICANN's 60-day transfer lock rule prevents transfers for 60 days after a domain is newly registered or after certain registrant data changes, to prevent hijacking.
Premium and Aftermarket Domains
Some short, generic, or keyword-rich domains command premium prices. Registries themselves sell certain domains at higher prices — .io, .ai, and many new gTLDs have registry-set premium tiers. The aftermarket is the secondary market where previously registered domains are bought and sold, often for thousands to millions of dollars. Expired domains with existing backlinks, traffic history, or brand value are particularly sought. Aftermarket platforms including Sedo, Afternic, and GoDaddy Auctions facilitate these transactions. Cloudflare Registrar sells domains at cost (no markup) and does not participate in aftermarket upselling.
Registration Is Not Hosting
Registering a domain gives you control over the name and the right to set its nameservers. It does not automatically create a website, email inbox, SSL certificate, or server. Hosting is where website files or application code live. DNS records — A, AAAA, CNAME, MX, TXT — connect the domain to hosting, email, and other services. Many outages happen because a domain was renewed or transferred correctly but DNS records were not migrated before the nameserver change took effect.
Frequently Asked Questions
Do you own a domain forever?
No. Domain registration is leased for a period of time, usually one to ten years depending on the TLD and registrar. You keep control by renewing before expiration.
What is the difference between a registrar and a registry?
A registry operates a top-level domain such as .com or .org. A registrar is the retail company where customers register and manage domain names.
Is domain registration the same as web hosting?
No. Registration gives you control of the domain name. Hosting provides the server or platform that serves the website. DNS connects the domain to hosting and other services.