ICANN Approves Ending .name’s Third Level: 22,000 Domains at Risk

⏱️ Lectura: 10 min

On July 28, 2026, ICANN approved completely destroying the third level of the .name domain: about 22,000 personal .name domains will be orphaned in February, exposing their owners to having a stranger hijack their email, their accounts, and even their IoT devices.

📑 En este artículo

1. TL;DR
2. What happened with .name domains
3. Context and history of the .name domain
4. Technical details: what happens to eliminated .name domains
5. How to protect your .name domains (or any third-level domain)
6. Impact and analysis
7. What’s next
8. Frequently Asked Questions
   1. What is the .name domain and how does it differ from other third-level domains?
   2. Why did Verisign propose eliminating the entire third level of .name?
   3. Can I lose my .name domain even if it’s paid through 2040?
   4. What happens to my email if I use an address on a third-level .name domain?
   5. How do I know if my domain is among the 22,000 affected?
   6. Is there a way to appeal ICANN’s decision?
9. References

The case was made public by developer Neil Fraser when his registrar notified him by email. Fraser registered neil.fraser.name almost 25 years ago and paid for it through 2040. Even so, the domain will disappear in a few months because of a decision made by Verisign, not him.

TL;DR

• On July 28, 2026, ICANN approved Verisign’s proposal to end the entire third level of .name.
• Verisign submitted the proposal on April 15, 2026 to simplify the TLD’s administration.
• About 22,000 third-level .name domains (of the type user.lastname.name) will cease to exist.
• Developer Neil Fraser will lose neil.fraser.name despite having paid for it through 2040.
• After the termination, second-level domains (like fraser.name) will become free for anyone to register.
• Whoever registers that second level could recreate email addresses and hijack linked accounts.
• Verisign bought Global Name Registry, the original operator of .name, years after its creation.
• The case exposes a rarely discussed risk: relying on a third-party TLD for long-term digital identity.

What happened with .name domains

Verisign, the company that manages the .name registry, proposed on April 15, 2026 to eliminate the domain’s entire third-level hierarchy. According to its justification, the move aims to simplify the TLD’s administration. On July 28, 2026, ICANN approved the proposal without any direct consultation with those affected.

Fraser learned of the decision a few days before publishing his account, on September 3, 2026, when his registrar sent him a notification email. There was no public consultation equivalent to what other domain name policy changes receive.

The domain neil.fraser.name has worked for almost 25 years as his website, his email address, and the backend for several personal APIs. Minutes after his daughter was born, Fraser also registered beverly.fraser.name for her. Both .name domains will disappear despite being paid through 2040.

Context and history of the .name domain

To understand the severity, it’s necessary to distinguish between two types of third-level domains. One is what informal operators like *.uk.co sell: someone buys the second level and resells third levels without any official registry. If that operator disappears, every domain it sold dies with it.

The .name domain is different. It was designed from the start as a TLD exclusively for third-level registrations: anyone can register xxx.yyy.name through any accredited registrar and get a complete, verifiable WHOIS record, just like with *.ny.us or *.co.uk. It’s not an informal reseller: it’s standard DNS infrastructure.

The hierarchy can be summarized as follows:

flowchart TD
    A["DNS Root"] --> B[".name"]
    B --> C["fraser.name (second level)"]
    C --> D["neil.fraser.name (third level)"]
    D -.-> E["Removed by ICANN"]
    C -.-> F["Becomes available to anyone"]

Fraser chose .name partly because at the time it was operated by Global Name Registry, a company independent of Verisign. He had a history of distrust toward Verisign and deliberately avoided registering there. Years later, Verisign bought Global Name Registry and ended up controlling the TLD anyway.

That original distrust was validated, according to Fraser, by the inaccuracies Verisign included in the proposal it brought to ICANN. The full text of the proposal isn’t publicly available, but the outcome is: total destruction of the third level.

Technical details: what happens to eliminated .name domains

Technically, ending the third level means erasing every xxx.yyy.name entry from the registry: the WHOIS record, the DNS delegation, and any associated records. The second level (yyy.name) isn’t erased: it becomes vacant and available for anyone other than the original owner to register.

That’s where the real risk lies. If someone other than Fraser registers fraser.name after the purge, they can recreate neil.fraser.name and, with it, his email address. With that address, an attacker can start password recovery processes on any service linked to that email over 25 years: version control, banking, IoT devices.

Resource	Before termination	After termination
neil.fraser.name (third level)	Active, with its own WHOIS record	Removed from the .name registry
fraser.name (second level)	Reserved, cannot be registered separately	Available for anyone to register
Email on the domain	Sends and receives email normally	Stops working; can be recreated by a third party
Linked IoT devices	Resolve DNS and work	Stop resolving and become unusable

Fraser sums it up this way: there’s no way to enumerate every account, online and offline, opened with that email over a quarter century. That’s the part Verisign doesn’t address with its proposal to simplify administration.

⚠️ Heads up: if your email lives on a domain you don’t directly control (a third level, an employer’s domain, or a free service), a policy change by the operator can leave you locked out of your own accounts.

How to protect your .name domains (or any third-level domain)

If you manage domains or depend on an email address in a third-level hierarchy, you should audit your exposure today, before a policy change catches you by surprise.

The first step is to check your own domain’s WHOIS status. On Linux and macOS, the client installs via a package manager; on Windows, you need to use PowerShell or install a separate client.

# Linux (Debian/Ubuntu)
sudo apt install whois -y
whois neil.fraser.name

# macOS (with Homebrew)
brew install whois
whois neil.fraser.name

# Windows (PowerShell, no native whois client)
Resolve-DnsName -Name neil.fraser.name -Type ANY
# or install a whois client with winget:
winget install --id Sysinternals.Whois

The whois output shows the Domain Status field. If pendingDelete appears, or the record simply doesn’t exist, that’s the signal that the domain is about to disappear from the registry.

#!/usr/bin/env bash
# domain-status-check.sh: alerts if a domain loses its WHOIS record
DOMINIO="neil.fraser.name"
ESTADO=$(whois "$DOMINIO" | grep -i "Domain Status" | head -1)

if [ -z "$ESTADO" ]; then
  echo "ALERT: $DOMINIO no longer has an active WHOIS record"
else
  echo "OK: $DOMINIO -> $ESTADO"
fi

dig +short NS "$DOMINIO"

This script runs well as a daily cron job: if WHOIS stops responding or the domain loses its NS servers, that’s the first sign it’s about to become unreachable.

If your email or accounts depend on a third level you don’t control (like .name, or a subdomain of a free service), the practical recommendation is to migrate to a second-level domain under a standard TLD (.com, .dev, .app) that you renew yourself every year. That way, control stays in your hands, not in the internal policy of a third-party registry.

To confirm the migration is complete, run dig MX yourdomain.com and dig NS yourdomain.com and verify they point to your own email and DNS provider, not the old domain.

Impact and analysis

Fraser isn’t an isolated case: ICANN approved affecting 22,000 third-level .name domain holders all at once. The decision came through an administrative proposal from Verisign, without a public consultation equivalent to what other domain name policy changes receive.

The underlying problem is structural: when a DNS registry changes ownership, as happened when Verisign bought Global Name Registry, holders inherit the new operator’s policy without having chosen it. It’s the same pattern that should concern any developer building digital identity, email, authentication, or APIs on top of third-party infrastructure that can change hands.

The irony, according to Fraser, is that he deliberately avoided registering with Verisign 25 years ago, precisely to avoid depending on that company. The later acquisition reversed that decision without him doing anything.

💭 Key point: the risk isn’t just losing a website: it’s that the freed second level (fraser.name) can end up in the hands of someone who rebuilds your digital identity from scratch, using your own name.

What’s next

Fraser closes his post with a direct line: it’s time to hire a lawyer. According to his account, there’s no individual compensation or appeal mechanism within the process ICANN followed to approve Verisign’s proposal.

For the 22,000 affected holders, the window before February is short. Anyone who depends on a third-level .name domain for email, authentication, or IoT devices needs to migrate before that date, because after the cutoff the second level becomes open for public registration.

📖 Summary on Telegram: View summary

Try it yourself: run whois yourdomain right now, or check your registrar’s latest notice, to confirm whether any part of your digital identity depends on a domain hierarchy you don’t directly control.

Frequently Asked Questions

What is the .name domain and how does it differ from other third-level domains?

It’s a TLD designed exclusively for third-level registrations (xxx.yyy.name) with a complete, verifiable WHOIS record, unlike informal resellers like *.uk.co that have no official registry.

Why did Verisign propose eliminating the entire third level of .name?

According to the proposal submitted on April 15, 2026, the move aims to simplify the registry’s administration. ICANN approved it on July 28, 2026.

Can I lose my .name domain even if it’s paid through 2040?

Yes. Neil Fraser’s case proves it: his domain is paid through 2040, and it will still disappear in February because of the decision to end the third level.

What happens to my email if I use an address on a third-level .name domain?

It stops working once the record is deleted. Worse, someone can register the freed second level and recreate your email address to try to hijack linked accounts.

How do I know if my domain is among the 22,000 affected?

Run whois on your domain and check your registrar’s notices. Any third-level .name domain falls under the termination ICANN approved.

Is there a way to appeal ICANN’s decision?

Fraser’s account doesn’t mention any individual appeal mechanism available to affected holders.

References

• Neil Fraser: .name Termination: the original account from the affected developer, with dates and details of the ICANN process.
• ICANN: the organization that approved the termination proposal on July 28, 2026.
• Wikipedia: .name: historical context on the TLD’s design as a third-level hierarchy.
• Verisign: the company that manages the .name registry and submitted the termination proposal.

📱 Enjoying this content? Follow @programacion on Telegram for daily tech content in Spanish: quick summaries, fresh content every day.

Imagen destacada: Foto de Markus Stickling en Unsplash