Verisign Unveils "Verisign Informed" Security Service and Formally Applies for .pki Top-Level Domain

Verisign, the global leader in domain name registry services and internet infrastructure, has officially pulled back the curtain on a significant new addition to its security portfolio. The company, which operates as the backbone for some of the internet’s most critical infrastructure, announced the introduction of Verisign Informed, a product designed to modernize how systems validate the status of digital certificates. Alongside this technological debut, the company confirmed it has submitted an application for the .pki top-level domain (TLD), signaling a strategic move to integrate its naming expertise with specialized security applications.

The dual announcement marks a pivotal moment for the Reston, Virginia-based corporation as it seeks to address a growing vulnerability in the digital trust ecosystem: the problem of "stale trust." In an era where cyber threats are increasingly automated and accelerated by artificial intelligence, the gap between the revocation of a security certificate and the recognition of that revocation by end-user systems has become a critical window of risk. Verisign Informed is engineered specifically to close that window, ensuring that security decisions are made based on real-time, high-fidelity data rather than outdated, cached information.

At the core of the Verisign Informed service is a robust certificate status mechanism. Digital certificates serve as the fundamental building blocks of trust on the internet, verifying the identity of websites, servers, and users. However, these certificates are not static. When a certificate is compromised, or when the underlying private key is no longer secure, the issuing authority must revoke it. Traditionally, systems have relied on Certificate Revocation Lists (CRLs) or the Online Certificate Status Protocol (OCSP) to check if a certificate is still valid. The challenge, as Verisign points out, is that many systems rely on old or cached data, leading to a state of "stale trust" where a system might continue to accept a revoked certificate because it has not yet received the updated status.

Verisign Informed functions as a high-performance certificate status service that provides immediate, authoritative information regarding whether a certificate has been revoked. By acting as a centralized, high-availability source for this data, the service allows systems to query the current status of a certificate before deciding whether to trust it. When a query is made, Verisign Informed returns a cryptographically signed OCSP response. This signature ensures the integrity of the status report, preventing third parties from tampering with the revocation data and providing the querying system with a verifiable proof of the certificate’s current standing.

The necessity for such a service is underscored by the shifting landscape of cyber defense. Verisign has highlighted the role of artificial intelligence in shrinking the "time to exploitation." In the past, attackers might have taken days or weeks to leverage a compromised certificate. Today, AI-driven tools can identify and exploit such vulnerabilities in a matter of hours or even minutes. In this high-velocity environment, relying on validity data that is even slightly out of date can be catastrophic. Verisign’s service is explicitly designed to minimize the temporal window in which a compromised or revoked certificate might still be erroneously trusted by various network nodes and applications.

To power this new security initiative, Verisign is leveraging its existing, massive-scale infrastructure. The company’s reputation is built on its ability to handle some of the most demanding lookup systems in the world. Currently, Verisign’s global DNS infrastructure processes approximately 8.6 million transactions every single second. This unparalleled scale provides the company with a unique advantage in deploying a certificate status service that must be both lightning-fast and globally accessible. The reliability required for the .com and .net registries is now being redirected toward solving the complexities of real-time certificate validation, ensuring that the "Informed" service can handle the rigorous demands of modern enterprise and government networks.

While the announcement has generated significant interest within the cybersecurity community, the product is not yet available for wide-scale adoption. Verisign Informed is currently in a limited beta phase, allowing the company to refine the service with select partners and stakeholders. The current roadmap targets a general launch in the first half of 2027. This timeline suggests a deliberate and methodical rollout, reflecting the critical nature of the service and the need for thorough testing in diverse network environments.

In a parallel development that underscores its long-term strategic vision, Verisign also announced its formal application for the .pki top-level domain. The acronym PKI, which stands for Public Key Infrastructure, refers to the entire framework of roles, policies, hardware, software, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. By securing the .pki TLD, Verisign aims to create a dedicated space on the internet for PKI-related usage scenarios.

The company noted that it views .pki as a potentially transformative gTLD (generic Top-Level Domain) that could serve specialized functions within the broader security industry. While specific use cases for the TLD were not detailed in the initial announcement, the move aligns with Verisign’s broader history as a steward of internet identifiers. By controlling the .pki extension, Verisign could offer a more secure and recognizable environment for infrastructure components, certificate authorities, or secure communication protocols that require a high degree of trust and specialized naming conventions.

This application for a new TLD follows a previous announcement where Verisign indicated it was applying to become a Registry Service Provider (RSP). This move was seen as a preparatory step for the next round of new gTLD applications handled by the Internet Corporation for Assigned Names and Numbers (ICANN). By establishing itself as an RSP, Verisign positioned itself to not only manage its own new TLDs but also to provide the technical backend for other organizations looking to launch their own specialized domain extensions.

The timing of the .pki announcement is particularly relevant given the current schedule of ICANN’s New gTLD Program. On Wednesday, ICANN is expected to reveal the full list of applications for the latest round of TLDs. This disclosure will provide a clearer picture of the competitive landscape and the various ways in which organizations intend to utilize the next generation of internet extensions. Verisign’s proactive disclosure of its .pki application sets the stage for its participation in this expansion of the domain name system.

The introduction of Verisign Informed and the pursuit of the .pki TLD represent a multifaceted approach to internet security. On one hand, Verisign is providing a technical solution to the immediate problem of stale trust and rapid AI-enabled exploitation. On the other, it is seeking to secure a piece of the internet’s naming real estate that is synonymous with the very technology it aims to protect.

As the industry moves toward the 2027 launch window for Verisign Informed, the focus will likely remain on how effectively the service can be integrated into existing web browsers, operating systems, and enterprise security stacks. The success of the product will depend on its ability to provide near-instantaneous responses without introducing latency that could degrade the user experience. Given Verisign’s history of maintaining 100% operational uptime for its core registry services, the industry will be watching closely to see if that same level of performance can be translated to the world of real-time certificate status validation.

For now, the announcement serves as a reminder that as the tools used by attackers evolve, the infrastructure of trust must evolve in kind. By addressing the nuances of certificate revocation and the naming conventions of the security industry, Verisign is positioning itself to remain at the center of the conversation regarding how the global internet stays both connected and secure. The upcoming revelations from ICANN will likely shed more light on how .pki fits into the broader ecosystem, but Verisign has already made its intentions clear: the future of digital trust requires more than just a certificate; it requires a constant, real-time flow of accurate information.