Top-Level Domain
The last part of a domain name, such as .com or .uk, organized in 1984 into a handful of generic names plus one per country, then opened to over a thousand new names and a source of income for some small nations.
A top-level domain is the last part of an internet name, such as .com in example.com or .jp in a Japanese site's address. The domain name system is a tree read from right to left, and the top-level domains are the branches directly under its root; see Domain Name System.
The original scheme was set out in a 1984 standards document by Jon Postel and Joyce Reynolds. It had a few generic categories:
- .com for companies,
- .edu for universities,
- .gov for the United States government,
- .mil for the U.S. military,
- .org for other organizations, with .net added soon after.
Every country also got a two-letter code taken from an international standard list, such as .fr for France and .de for Germany. The United Kingdom became an exception, using .uk instead of the standard .gb. The scheme was American in origin, which is why .gov and .mil still mean the U.S. government.
Since 1998, a nonprofit called ICANN has coordinated the system under contracts originally with the U.S. government, which handed over its oversight role in 2016. A short list of authoritative root servers tells resolvers where each top-level domain's servers are. There are thirteen named root server addresses, each served by many machines around the world sharing one address; see Anycast.
Country codes became a business. Some small places license their codes to companies because the letters spell something marketable. Tuvalu's .tv has earned the country millions of dollars a year from television and streaming sites. Anguilla's .ai brought in a sizable share of government revenue after AI startups rushed to register. The .io code, popular with tech companies, belongs to the British Indian Ocean Territory, and its future became uncertain when the United Kingdom agreed in 2024 to transfer sovereignty over the islands.
In 2012 ICANN opened applications for new generic names and received nearly two thousand. More than a thousand were created, including .app, .shop, .berlin, and brand names. Google required every site on .app and .dev to use encrypted connections by adding the whole domains to browsers' preload lists. Its .zip and .mov domains, released in 2023, drew criticism because addresses looked like file names, an opening for Phishing.
Names have also been fought over in court. Registering someone else's trademark to sell it back led to an international dispute process in 1999. Domains in non-Latin scripts became possible in the 2000s; see Internationalized Domain Name.
Registrars sell names under each top-level domain, while a registry runs each one.
See also2
URL
The address format that names every resource on the web, its parts from scheme to fragment, and why parsing one correctly is harder and more security-relevant than it looks.
Web Platform20 connections
Country Code
The standard two- and three-letter codes for countries and territories maintained under ISO 3166, used in software, addresses, domain names, and flags, and a steady source of edge cases because borders, names, and recognition change.
Data & Content4 connections
Linked from5
- AnycastNetworks & Distribution
Anycast announces the same IP address from many locations and lets normal routing send each client to the nearest one.
- Country CodeData & Content
The standard two- and three-letter codes for countries and territories maintained under ISO 3166, used in software, addresses, domain names, and flags, and a steady source of edge cases because borders, names, and recognition change.
- Domain Name SystemSystems & Tooling
The distributed directory translating names to addresses, and the layer where propagation delays live.
- Hash TableComputation & Algorithms
A key-value structure that uses a digest of the key to index an array of buckets.
- Internationalized Domain NameWeb Platform
Domain names written in non-Latin scripts and accented letters, made to work in an ASCII-only DNS by encoding them as xn-- strings, and the browser rules that decide when to show the real characters and when to show the code to block lookalike attacks.