ICANN parent IANA officially recognizes .onion TLD, giving Tor domains basic security features like SSL and TLS certificates
Internet Regulators Just Legitimized The Dark Web — The so-called dark web is often mistakenly believed to be just an unsanctioned space of the internet that hosts dingy, illegal websites.
Context & Ripple Effects
For years .onion existed in a gray zone: Tor hidden services used the suffix, but it sat outside any registry, which made HTTPS on onion addresses awkward to provision. IANA's move gives the suffix standing in the naming system itself, so certificate authorities can issue SSL/TLS for onion sites without treating them as anomalies.
The recognition is also defensive. Weeks later, Facebook and the Tor Project would get the IETF to formally designate .onion as a special-use domain, locking it out of ICANN's commercial gTLD pipeline permanently — the same carve-out logic ICANN later applied when proposing .INTERNAL for internal-only use.
First-order effects
- Tor hidden-service operators can now obtain SSL/TLS certificates for .onion addresses, closing the browser warning gap that made legitimate onion sites look unsafe next to their clearnet equivalents.
- Facebook, already running an onion service at this point, gets an officially recognized namespace for its Tor presence instead of relying on ad-hoc certificate handling.
Second-order effects
- The move forces the governance question into the open: if a non-ICANN suffix can be legitimized by IANA and then standardized by the IETF, other organizations have a template for securing namespaces outside the gTLD auction economy.
- Big-platform adoption becomes the credibility test — Twitter's later launch of a Tor onion service shows mainstream sites treating .onion as deployable infrastructure, while its subsequent certificate lapse shows how fragile that commitment is once maintenance attention drifts.
Third-order effects
- The pattern points toward a split DNS world: special-use TLDs (.onion, .internal) governed by standards bodies or reserved from the root entirely, alongside the commercial namespace ICANN auctions off — with security features like TLS available in both tiers.
- Legitimization cuts both ways structurally: official status helps mainstream privacy-preserving sites, but Recorded Future's finding that only 8,400 of 55,000 sampled onion domains had live sites suggests the recognized namespace will remain small, maintained mostly by a handful of large operators rather than a broad ecosystem.
The trend: Special-purpose top-level domains are being carved out of ICANN's commercial system through IANA and IETF recognition, giving alternative namespaces like .onion the same cryptographic trust machinery as the open web.