Tell HN: Remember to migrate away from .name domain

4 points by nikanj ↗ HN
If you have a third.level.name domain, it'll get permanently expunged next year. Have you successfully taken steps to migrate away? Did you move to a standard .com domain, or are you taking your chances with another .tld?

Personally, I'm stuck in Microsoft hell because Azure admin emails cannot be changed and support is both uncaring and powerless.

85 comments

[ 2.0 ms ] story [ 21.5 ms ] thread
In case you haven't heard about this, see https://domainnamewire.com/2026/09/03/third-level-dot-name/
> His registrar informed him that his registration will be terminated in February (even though it’s paid through 2040).

Wonder if registrars will refund to people's cards.

Definitely not. No company ever refunds unless you sue them, they're worried you'll sue them, or they want a good reputation, and domain registries do not care about reputation because they are monopolies. Registrars might, a little, but it's not up to them.
(comment deleted)
I don’t think the registered leaseholder in question even demanded the registrar adhere to the contractual terms. He may just be rolling over without a confrontation. The story smells incomplete to me.
If Verisign frees up domain.name, the new owner could inherit email still directed to the old address, for example: password resets.
Consider editing title to be "Tell HN:" Thank you for the PSA!
Why re they doing this? Looks stupid to me.
Worth noting, this doesn't affect domain.name, thus 2nd level domains. I was actually unaware you could directly register a 3rd level domain... Got my .name in the sunrise phase of .name, though it later rendered obsolete by name change on marriage (but still got it).
I hope the unassociated previously registered x.domain.name subdomains will be blocked somehow? This sounds super scary.
But that’s where all the money is
I have a second level and I’m in the process too. This kind of shitty behaviour warrants bankruptcy.
Biggest rug pull in the history of dns
Nah, turning existing domains premium (sometimes 10x or higher cost) under the users is IMO worse, as it can catch people that just have it on auto-renew unaware.
This. Happened to me a few times.

I get a cheap domain for allegedly $1 renew and then get charged for $10 because they changed their minds. It should be illegal.

$10 is not bad, I've seen situations where domains turned into premium and jumped to triple digits...
$1 → $10 really seems like first year vs renewal pricing.
Yeah $1 → $10 is not bad at all since org/com are around that much.

The crazy thing to me is that a lot of people see first-year prices for vanity domains and don’t seem to understand that the math doesn’t "math" if they’re going to keep the site for more than a couple of years.

They'll acquire an .app, .xyz, or .lol for a buck without realizing that in as little as two-three years, they’ve already spent the same amount as they would on a standard top-level domain like .com, .org, or .net. And now they're just losing money after that...

I think people mostly get .app or whatever when the .com is already taken. I have a couple .dev ones, they’re a bit more expensive than a .com, but not that much. (I should probably use .org more often!)

And there are first-year promotions for .com, too: currently a few registrars are offering one for $3-ish, although this is usually limited to one domain per account.

10 is fine. I lays like 70 for a domain that I don’t even use recently :-)
See also: .eu revoking registrations of UK residents after Brexit.
That seems like a rather predictable consequence?
The EU, like most countries, only grants their tld to people, companies or organizations based in the European Union. Why should UK citizens be allowed to use it?
Revocation shouldn't be nearly as strict as granting.
When they got it, they were presumably citizens of a EU country
Shockingly last time I quit a job they revoked my access to their systems even though I was totally an employee when my access was granted.
I see a domain name as property. Am I allowed to buy a house close to the border? Yes. If they change the law, I don't think it's fair to take the house away from me.
If the EU had a law saying no foreigner could own a house inside the EU, and you bought a house and then renounced your EU citizenship, it would be entirely appropriate that the EU forces you to sell the house or forfeit it.
Why would that law need to exist for something as minor as a domain name? If it was a valid purchase then let them keep it.
I don’t set the .EU rules. But if they established that the TLD can be used only by EU citizens (or whatever the exact criteria are), I see no reason they should not enforce that. This doesn’t appear to be a case where they changed the rules. It’s a case where the rules were clear and it’s certainly not the EU’s fault that the registrant no longer meets the retirements.

From the other side, why should the EU allow someone outside the EU to hold onto a domain that a person within the EU might want or benefit from?

"they should enforce their rules" is a pretty pointless statement in a discussion of whether the rules make sense.

They should let people keep it because it was bought under the correct circumstances and it's very disruptive to rip away a domain name while harmless to let a very tiny fraction escape that way.

I disagree that the rules don’t make sense. The fact that the rules are inconvenient for a small set of individuals who registered a EU domain and live in a country that decided to leave the EU does not mean the EU rules are wrong.

> it's very disruptive

Britain leaving the EU was very disruptive. I don’t see why the EU should alter their rules to accommodate British citizens. It doesn’t seem like responsibility of easing the disruption should fall at all to the EU when Britain created the disruption.

I disagree, I bought the house legally, no reason to keep me out. Or at least it doesn't seem fair
Fair is relative. Some places do have bans on foreigners owning housing because it drives up the local real estate prices.
No, but if the country where you built your house changes. Then your adress is going to change no matter what.
Also very true. You own the house, the government owns the address.
Fair? No, not at all. Even eminent domain specifies that the seizure be for public use, and the owner be fairly compensated.
You don't really own the domain name though, you rent it from the registar for a fixed term during which you can trade it if you so desire. But it is not something you own, it is a rental with conditions and it can always be taken away. Not saying its fair or not but that's what it fundamentally is and doesn't really map to a fully owned asset.
Yeah. Shame on ICANN for allowing this. It’s another example that ICANN isn’t working in the public’s interest.
Jesus Christ. In 25 years of working on the Web, this is the first time I'm hearing of "third level domains". WTF? Where and when did this come from?

No shade to the folks being harmed by this situation. Sorry. I'm just really non-plussed at the idea that the registrar is charging for what looks like should be a DNS prefix.

there’s nothing special about any level of domains, it was always a hierarchical protocol
The difference is that .name allowed you to buy steven.smith.name and someone else could buy john.smith.name. The shared hierarchy between those names is the .name domain, .smith.name doesn't really exist.

Of course, this could be trivially fixed if .name would take the shared part of every second level domain, treated it like a TLD for legacy customers, and turn it into a hierarchical system.

But they'd need to do that for possibly thousands of paying customers, there's no way they'd be able to afford that, Verisign only makes 1770000000 dollars of yearly revenue! Honoring these existing contracts would bankrupt them!

They wouldn't need to "do that" that's how it already works. They're actively undoing that
There are good reasons to do it to be honest (aside from people not knowing about these types of domains, DNS servers also need to be maintained to keep this kind of delegation working which isn't free, and then there's the whole problem the public suffix list is trying to solve).

There's no strict need to do it, let alone to do it now, but an eventual transition does make sense, if spread out over a couple of years with guaranteed backwards compatibility and maintaining existing domains and ownership.

ah i see, it does require a bit more custom code than a commodity tld then

shame that there’s no room in the world for some creativity and we need to normalize the space of all tlds into the same uncreative .com clone

> shame that there’s no room in the world for some creativity and we need to normalize the space of all tlds into the same uncreative .com clone

this is in large part pushed by custom tlds being at high risk of prices suddenly going up by 10 times or 1000 times.

.name has been doing this for 25 years so I guess you must've missed them right when you got started!

For .uk, this scheme was the default until 2014 (a long time, considering it's first use was in 1985). Everything was .co.uk or .org.uk and you bought those directly with registrars. Then, in 2014, .uk registrations were allowed, and the .co.uk and .uk domains now coexist.

Unrelated. What happened with .io? Didn’t they say they would disappear or did that change?
Wait, so if you own Johnson.name you and use John.Johnson.name as your web address, that will stop working?
No this is people who have registered john.johnson.name, but johnson.name remains Verisign's (and e.g. unrelated Alice has also registered alice.johnson.name)
Which is an insane scheme to begin with. Why not "john-johnson.name"?
So that you could use john@johnson.name as your email instead of john@john-johnson.name. The .name gtld was created in the height of the "we will move to a paperless world and email will become the universal way to communicate" era.
I just own lastname.com so my email is first@last.com, would recommend (I guess probably a bit harder nowadays)
Only one person with a given lastname can do that (or I suppose one person and their near family).
Because registration of second level domains in .name was not available.
tbh, as an owner of a .name (tld) I don't understand how this worked in the real world.

I have subdomains like {myfirstname}.{lastname}.name ... {lastname}.name is mine

So obviously {myfirstname}.{lastname}.name is a subdomain...

Could someone now have bought {myfirstname}.{lastname}.name and DNS would go to their page?

If so, I find the new behaviour way more sane...

If I wanted to sell a subdomain, I could do this, no questions asked. I just point the subdomain to another IP.

But I pay for {lastname}.name so it should be mine, just like any other .tld I have!

Yes, if you pay for {lastname}.name, the full domain is yours, including whatever you want to do with subdomains. However, .name also allowed direct registration of third level domains ({firstname}.{lastname}.name). These were mutually exclusive by domain… so if somebody registers the 3rd level, nobody can directly buy the 2nd level, and vise versa. As far as I understand, it was first come first serve based on the 2nd level domain.

There were also some shenanigans around automatic email routing in that case.

Ok. But why would anyone buy a third level domain when they could have bought the second level? It’s a strange thing.

Were the third level domains cheaper?

Me personally, it wouldn’t even occur to me to register a third level directly, because why bother when you can have the second level and do whatever you want with it.

Super strange.

Buying a third level also came with some email functionality, so if you owned first.last.name, you would be able to forward emails from first@last.name to you. If you have firstlast.name, you need something like first@firstlast.name

It was a bit odd, but well intentioned.

When the TLD first opened up you were not allowed to purchase {lastname}.name, it was restricted to third level domains only in an attempt to lure in customers wanting {first name}@{lastname}.name as an email address. But they didn't make it easy to configure that email redirect if you used another registar than verisign, and email has evolved.

Later in a desperate search for MORE MONEY, they opened up 2nd level if no 3rd level already existed under that 2nd. This sounds less like another search for more money with new sales as people are saying, but a reduction in unique domain handling and cost cutting (they can shutdown all those email redirection servers).

Soo... people actually used it?
Not very many, but yes
I had a .name domain since its birth. Then proceeded to loose it because of bad luck and bad planning.

I tried to retrieve it but after a week of back and forth exchanges (mostly back from my side) I gave up.

Moved to .fr hoping that it will be stable (price wise) as a national TLD - so far so good.

National TLDs from major developed nations and .com/.net/.org are the only TLDs I would consider safe for the long-term.

(I’m excluding restricted-use TLDs like .edu here.)

I'm not sure I get it. If anyone registers a domain first.second.name then you are basically registering a subdomain under second.name, right? You don't own anything, second.name owns your subdomain and can do whatever they want with it
Well not really. There are TLDs where third level domains are the primary thing that people register; e.g you can't register example.uk, you need example.co.uk.

Although it is weird to have a registrar where you get to pick both the second and the third level freely.

For your example, you can register second level domains under .uk since 2014
.name was special (derogatory). When you registered first.last.name, .name would give an authoritative NS record for first.last.name, but not last.name. What you think is happening is that .name is spinning up a second DNS zone for last.name, and then issuing a normal declaration, but it's way more cursed.

Delegating multiple levels down is allowed by DNS spec but almost never done, and causes problems. For starters, some registrars just straight up did not handle the first.last.name case at all. Which is particularly bad for .name because originally, you could only register third-level domains. Only later did .name added second-level domain registration.

This creates an obvious collision problem: if John Doe registers john.doe.name first, and then Jane Doe wants to register doe.name, what happens?

You might think that, obviously, both registrations stick. But this means John Doe owns a subdomain of Jane Doe's namespace, that Jane Doe cannot get rid of or otherwise control. When someone looks up records on john.doe.name, doe.name is never queried; .name skips it. This causes all sorts of problems for cookies: John Doe can now set cookies on Jane Doe's website, and Jane Doe's website always sets cookies that John Doe's website can read[0].

The time-reversed scenario (John Doe registers after Jane Doe) is even worse. Obviously, top-level domain operators should not be allowed to project subdomains onto other people's registrations like this. Like, imagine if Verisign decided you could register subdomains on someone else's domain, that they did not control and could not get rid of, if you paid them a little extra? There would be all sorts of shenanigans.

The alternative resolution is confiscation: when Jane Doe registers doe.name, John Doe loses his website. This is more in line with how you thought it was working. And, indeed, what Verisign is planning to do is basically this en masse, dropping all the third-level delegations. Probably because the operational headaches of managing two different conflicting delegation schemes was too much.

[0] This is actually a problem for any DNS suffix that is shared across multiple websites; there's a Public Suffix List that exists specifically to keep you from, say, writing cookies to .com that hit every website. But doe.name isn't exactly a public suffix: it's Jane Doe's personal website, one that just happens to have a suffix collision with another website because of a stupid idea someone had.

> You might think that, obviously, both registrations stick.

I actually thought that one of the two registrations would be denied.

The only (somewhat) sane way I see how a registrar could offer both 2nd and 3rd level domains at the same time would be to keep them entirely separate:

Maintain two lists: One is a list of ordinary 2nd level domains that were directly sold, say something like whatsina.name.

The other would be a list of "commons" 2nd level domains that cannot be sold, because people own individual 3rd level domains on it, like doe.name above.

Which domain belongs to which list would realistically be first-come first-serve: If Jane Doe got there first and purchased doe.name, it would become a directly sold domain, and John Doe's (and also Jack Doe's) registration requests for john.doe.name and jack.doe.name would be denied.

Conversely, if John Doe got his registration for john.doe.name through first, doe.name would become a "commons" domain and Jane Doe's request would be denied, but Jack Doe's request for jack.doe.name would still get through.

But apparently this wasn't how it was handled?

There's another wrinkle I didn't know about .name until someone else brought it up here. When you registered first.last.name you also got an e-mail forwarder for first@last.name.

First off, it means selling doe.name separate from john.doe.name is literally impossible, because the e-mail forwarder only works if doe.name publishes the correct MX records. You cannot half-delegate a domain by record type, so .name can't shadow doe.name's MX record. So you're entirely correct that one of the two registrations gets denied because that's literally the only way the mail forwarder still works.

Second, it means hell for VeriSign's backend systems engineers. Along with the list separation you mentioned, any time someone registers first.last.name, it needs to also create a parallel registration for last.name, publish MX records on the corresponding subzone, and spin up a new mail server to forward mail for people who own a subdomain of last.name. I suspect this is part of why VeriSign wants to kill third-level domains more than anything else.

I'm curious, why were people interested in these .name domains? john.smith.name is weird. Why not just get Johnsmith.me or net or whatever?

Were they charging a fractional rate since you were getting a fractional domain? If it was $3 USD per year, I could see the appeal for some.

I find the dotted version to be structurally sensible and aesthetically pleasing, compared to alt.

Obviously just a matter of taste and didn’t even spent 3s thinking about any possible repercussions.

Because of the meme potential of heisenberg@say.my.name and similar
I don't understand what this post is about. I own myfamily.name and I have host names like firstname.myfamily.name. What's wrong with that?
Nothing. OP's title is misleading at worst. At best he doesn't understand what's the actual issue.

Version has a number of domain names like fraser.name under which people could register for something.fraser.name. Verisign will remove those, so if you registered a third level domain from Verisign, that's when you need to migrate away

You are misrepresenting the issue and misleading a lot of people with that title. Please change it and clarify the issue or delete your thread altogether. It's false.

Also, you can change Azure admin emails. Not sure what you're on about. There's no such thing as unchangeable email addresses in Azure in the way you are making believe. I think I know what you mean but even then there's a way to change things.

Don't be an alarmist because you're ignorant.

How am I misrepresenting it?

And trust me, I know email addresses saved in a database can be changed. The problem is convincing Azure’s outsourced techsupport of that.