Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If so why is the difference? I've tried to google it but nothing relevant was found.

share|improve this question
Not a full answer, but tangentially relevant: It would be impossible to register the domain The .info registrar would not allow it. – TRiG Jun 11 '13 at 14:46
Two TLDs come to mind: .mil and .cn. So, what was your question? – Deer Hunter Jun 11 '13 at 19:05
What do you mean by "security"? – Deer Hunter Jun 11 '13 at 19:06
@DeerHunter by security I mean lack of attack vectors which involve TLD specific features. – Moonwalker Jun 13 '13 at 11:28
up vote 6 down vote accepted

In the general case probably not, although I'd imagine that the authorities running each TLD will have varying levels of technical and operational security, so your domain may be safer with some than others.

One specific case to note however is the prospective .secure TLD whose goal is specifically to provide a secure environment both in terms of their security and the security of sites within the .secure TLD

share|improve this answer
"I'd imagine that the authorities running each TLD will have varying levels of technical and operational security" Is is possible to have some comparisons here? – Moonwalker Jun 11 '13 at 16:13
@Moonwalker - policies aren't fixed, so what was a valid answer yesterday, won't be regarded as such tomorrow. – Deer Hunter Jun 11 '13 at 19:35
@Moonwalker Also it's very difficult to say, one of the problems of online reputation/security is that all companies will say that they do it well and rarely provide enough detail/assurance for a rational assessment.. – Rоry McCune Jun 11 '13 at 20:39

I noticed your question is tagged DNS. The significant difference in DNS is that some TLDs have DNSSEC enabled.

share|improve this answer
@l0b0 the first link I provided has a complete list. – Colin Pickard Jun 11 '13 at 16:55

From the point of view of the specification for domain names, no. The TLD identifiers are arbitrary strings per the specification document for domain names, RFC 1034. There are security measures that can be taken to address specific services hosted from a domain, but nothing inherently secure or insecure about a given TLD.

There may be some empirical differences in which TLDs are hit by botnets (if they are in fact hitting domains rather than IPs), but this difference is going to be a moving target and I'm not aware of any frequency analysis that's been done on attacks on TLDs.

Edit: I should also note that the administrator of each TLD is able to enforce their own requirements for registering a domain within that TLD. This provides a certain level of authentication for names within that domain, but I am unaware of any requirements that address technical security requirements for registrants.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.