Verisign Unveils New "Verisign Informed" Security Service and Moves to Secure .pki Top-Level Domain

In a significant expansion of its security and infrastructure portfolio, Verisign (NASDAQ: VRSN) has officially announced the development of a new real-time security product dubbed Verisign Informed. The announcement, which coincides with the company’s formal application for the .pki top-level domain (TLD), marks a strategic push by the internet infrastructure giant to address long-standing vulnerabilities in the way digital trust is established and maintained across the global network.

The core objective of Verisign Informed is to combat what the company describes as "stale trust"—a pervasive security gap where systems make critical authentication and encryption decisions based on outdated or cached security certificate information. As cyber threats evolve and the speed of digital exploitation increases, the lag between the revocation of a compromised certificate and the recognition of that revocation by end-user systems has become a primary target for sophisticated actors.

Addressing the Vulnerability of Stale Trust

In the current architecture of the internet, Public Key Infrastructure (PKI) serves as the bedrock of security. Digital certificates are used to verify the identity of websites, encrypt communications, and sign software. However, this system relies heavily on the ability to effectively communicate when a certificate should no longer be trusted. If a private key is stolen or a certificate is otherwise compromised, it is revoked by the issuing authority.

The challenge lies in the dissemination of this revocation status. Traditionally, systems have relied on Certificate Revocation Lists (CRLs) or cached responses that may only update periodically. This latency creates a "window of vulnerability" where a revoked and potentially malicious certificate continues to be honored by browsers, servers, and automated systems. Verisign Informed is designed to act as a high-performance, real-time certificate status service that provides the most current information available regarding a certificate’s validity.

By offering a centralized, highly available source of truth, Verisign aims to ensure that when a system queries the status of a certificate, it receives an answer that reflects the immediate reality of that certificate’s standing. This move is particularly relevant in an era where automated attacks and artificial intelligence are being used to identify and exploit security gaps within minutes or even seconds of their appearance.

Technical Implementation and Scale

At its technical core, Verisign Informed utilizes the Online Certificate Status Protocol (OCSP). When a system needs to verify a certificate before establishing a trusted connection, it can query the Verisign Informed service. The service then returns a cryptographically signed OCSP response. This signature is vital, as it ensures the integrity of the status report itself, preventing attackers from intercepting the query and providing a false "valid" response for a revoked certificate.

Verisign is uniquely positioned to offer a service of this magnitude due to its existing role as the operator of the registry for .com and .net, as well as two of the world’s thirteen regional root servers. The company’s infrastructure is already built to handle immense pressure, currently processing approximately 8.6 million Domain Name System (DNS) transactions every second. By leveraging this massive, globally distributed footprint, Verisign Informed is intended to provide the low-latency responses required for real-time security checks without hindering the performance of the applications relying on it.

The company has emphasized that as AI-driven tools decrease the "time to exploitation," the traditional methods of checking certificate validity are becoming insufficient. The ability for an attacker to weaponize a compromised credential has outpaced the speed at which many systems refresh their trust data. Verisign Informed seeks to bridge this gap, providing a modernized layer of defense that matches the tempo of contemporary cyber threats.

Strategic Expansion into the .pki TLD

Alongside the product announcement, Verisign confirmed that it has submitted an application for the .pki top-level domain. This move is part of the broader second round of the Internet Corporation for Assigned Names and Numbers (ICANN) New gTLD Program. Verisign’s interest in .pki is a logical extension of its identity as a provider of critical internet infrastructure and security services.

The company views the .pki TLD as a specialized space that could host a variety of Public Key Infrastructure usage scenarios. While many TLDs are marketed for general website use or brand identity, .pki is likely intended for more technical and structural applications. It could serve as a dedicated zone for certificate authorities, secure communication endpoints, or organizational trust anchors. By controlling this TLD, Verisign could offer a more secure and logically organized environment for the deployment of PKI-related services.

This application follows Verisign’s previous announcement that it was seeking to become a registry service provider (RSP) for new TLDs. This dual strategy—acting as both a registry for its own new domains and a service provider for others—suggests that Verisign is looking to diversify its revenue streams and solidify its influence over the future architecture of the Domain Name System. ICANN is expected to reveal the full list of applications for this latest round of TLDs this Wednesday, which will provide more clarity on the competitive landscape Verisign is entering.

Market Context and Future Rollout

The introduction of Verisign Informed and the pursuit of .pki come at a time when Verisign is looking to expand beyond its traditional role as a passive registry operator. While the company has long been the steward of the internet’s most valuable real estate in the form of the .com zone, the growth of the DNS market has slowed in recent years. Moving into active security services allows Verisign to provide higher-value, specialized products to enterprises and government entities that require extreme levels of assurance.

The move also reflects a broader industry trend toward "Zero Trust" architecture, where no entity is trusted by default, and every connection must be continuously verified. Verisign Informed fits neatly into this philosophy by providing the "continuous" part of the verification equation.

Currently, Verisign Informed is in a limited beta phase. This period allows the company to test the service with select partners and refine the performance of the OCSP response engine under various real-world conditions. Following the conclusion of the beta and the necessary infrastructure scaling, Verisign plans to launch the service for general availability in the first half of 2027.

The 2027 timeline suggests that Verisign is taking a cautious and deliberate approach to the rollout, ensuring that the service meets the rigorous uptime and reliability standards expected of a company that manages critical components of the global internet. Given the sensitivity of certificate status information—where a false negative could block legitimate traffic and a false positive could allow a breach—the stakes for the service’s accuracy and availability are exceptionally high.

The Road Ahead for Verisign

As the digital landscape becomes increasingly complex, the role of infrastructure providers is shifting from merely directing traffic to actively securing it. Verisign’s dual announcement of a real-time security product and a specialized TLD indicates a clear vision for the company’s future: becoming the primary arbiter of trust in the digital domain.

The success of Verisign Informed will likely depend on its adoption by major browser vendors, operating system developers, and large-scale enterprise networks. If these stakeholders integrate Verisign’s real-time status checks into their standard security protocols, it could significantly raise the bar for global cybersecurity.

Similarly, the acquisition of the .pki TLD could provide Verisign with a unique platform to innovate in the PKI space, potentially offering new types of secure naming services that go beyond the capabilities of existing TLDs. As the industry awaits the full disclosure of TLD applications from ICANN, Verisign has positioned itself as a forward-looking leader, ready to address the next generation of internet security challenges.