Verisign’s Role as a Root Zone Maintainer

Ensuring Continuous Connectivity

Functioning like a layered digital address book, the Domain Name System (DNS) root zone sits at the top of the authoritative mapping database for the internet, containing the information needed to find any top-level domain (TLD). The root DNS service is provided by root server operators managing thousands of root name servers located all over the world, which act as authoritative name servers to answer queries from millions of recursive DNS clients. In this manner, individual internet users are directed to the intended internet location or resource trillions of times each day.

The authoritative name servers that serve the DNS root zone make up a large network that is configured in the DNS root zone as 13 identities named “A” through “M.” Verisign is one of only twelve root server operators worldwide operating both “A” root and “J” root. But we have also taken on the additional commitment to maintain the root zone itself on behalf of the Internet Corporation for Assigned Names and Numbers (ICANN) as the Root Zone Maintainer under a services agreement with ICANN, helping to ensure that this core element of the DNS distributes authentic root zone files to the root server operators. In this role, Verisign works closely with the other root server operators, as well as ICANN and Internet Assigned Numbers Authority (IANA), to ensure changes to the root zone are cross-checked for accuracy and integrity before being applied across the internet.

As the Root Zone Maintainer, Verisign is a member of ICANN’s Root Zone Evolution Review Committee (RZERC), which reviews proposed architectural changes to the content of the DNS root zone, the systems including both hardware and software components used in executing changes to the DNS root zone, and the mechanisms used for distribution of the DNS root zone.

Verisign also participates in ICANN’s Root Server System Advisory Committee (RSSAC), which advises the ICANN Board and community on matters relating to the operation, administration, security, and integrity of the Root Server System.

Together with the community, RSSAC, RZERC, ICANN and the root server operators, Verisign helps to ensure the availability and reliability of root server system that enables trillions of online connections each day.