Verisign announces Verisign Informed, applies for .pki top level domain

Verisign Informed is a certificate status service. It returns cryptographically signed OCSP responses so a system can check whether a certificate has been revoked before trusting it. The product is in limited beta, with general availability planned for the first half of 2027.

The problem it addresses is stale trust: systems relying on cached or outdated certificate information. As the time between a compromise and exploitation shrinks, that gap matters. Verisign is positioning its existing large-scale lookup infrastructure, which handles roughly 8.6 million DNS transactions per second, as the basis for handling this workload.

For domain holders, the practical effect is indirect but real. Every website with TLS relies on certificate status checks. A faster, more current revocation check reduces the chance that a compromised certificate is still accepted. That is a security improvement for the ecosystem, not a change in how domains are bought or sold.

The .pki application is a separate move. Verisign has already said it was preparing to act as a registry service provider for new TLDs. Applying for .pki would put it in the public key infrastructure namespace, a natural extension of its certificate business. ICANN is expected to reveal all TLD applications this week, so whether others have applied for the same string is not yet known.

What remains unclear is how .pki would actually be used. The announcement describes it as potentially useful within PKI scenarios, but gives no concrete naming model. Registry applicants often file broadly and refine later. Domain holders should watch the application list and any subsequent policy process, since a new gTLD in this space could create a niche namespace for certificate-related identifiers.