In early 2024, Orange Domains built a native DNS-Web3 bridge from the ground up for .locker, an ICANN-accredited gTLD. Behind it is a full smart-contract stack authored on two different chains, hardened through formal security audit, deployed and publicly verified on Ethereum and Bitcoin, and operated daily as production registry infrastructure.

That work is why Orange Domains' General Manager, Don Ruiz, was appointed by ICANN's President and CEO to the Technical Study Group on Integration of the Global DNS gTLDs and Alternative Naming Systems — an eight-person group alongside senior technologists from Verisign, ENS Domains, Identity Digital, Unstoppable Domains, Public Interest Registry, deSEC, and ICANN's Security and Stability Advisory Committee. The TSG's report will recommend best practices for DNS-Web3 integrations, providing a valuable framework for Web3 gTLD longevity and security.

As a new wave of Web3 gTLDs prepares to enter the root, Orange Domains is ready to extend our expertise to operators who need to get the DNS-Web3 bridge right the first time.

Why Now

Deadlines are about to collide.

August 10, 2026
The first draft of recommendations for integrating with alternate roots to be released
August 12, 2026
ICANN new gTLD application window closes
October 15, 2026
The final report of integration recommendations lands for ICANN review
Unknown date
ICANN approves recommendations for secure integrations with alternate roots

Web3 gTLD applicants will start designing bridges before the Technical Study Group's recommendations on integrating DNS with alternate roots are finalized. The wrong architecture can put your gTLD delegation and target launch date at risk.

What's at Stake

The obstacles most teams won't see until it's too late.

There is no rulebook for combining DNS knowledge with Web3 protocol. A responsible bridge touches nearly every layer of registry operations: proving cross-system control, reconciling wallet addresses with registrant identity, defining what "the same name" means across DNS and alternate roots, keeping smart contracts compliant with registry policy, resolving lifecycle mismatches, and handling names with prior onchain history.

Each has its own pitfalls, assumptions, and regulations to navigate. Guessing wrong on architecture means rebuilding after the fact — a costly, slow position to be in for launching a new gTLD.

The Gap

The requirements nobody is ready for.

Every gTLD operator knows registrar agreements, zone files, and ICANN policy. Every Web3 native knows protocols, gas fees, and the chain landscape. Almost no one has had to combine them — because until this round, no gTLD needed to.

That's the gap consulting with Orange Domains closes.

Looking for more information about ICANN and the Web3 gTLD landscape? We can help. Drop Don Ruiz a line at don@orangedomains.com.

What We Offer

End-to-end support across every layer your gTLD has to satisfy.

Orange Domains can guide you through your initial application, post-delegation build, and operations.

📋
Integration Requirements & RSEP Readiness
An audit of your application against the integration framework as it takes shape so your submission answers ICANN's questions before they're asked. Only possible from a team already in the room where the framework is being written.
⚖️
ICANN Compliance Support
Fluency in the TSG framework and the ICANN policy underneath it means Web3 decisions don't create compliance blind spots, even as you take on a second set of rules from the Web3 side.
🏗️
Technical Architecture Guidance
SRS/EPP design, smart-contract architecture, resolver and source-of-truth design, security-model engineering, lifecycle management, and abuse mitigation — built from scratch once already, applied directly to your gTLD.
⚙️
Custom Web3 Development
Cross-chain contract authorship, resolver and gateway infrastructure, SDKs, APIs, and digital wallet integration, all designed for you on a foundation already stress-tested in production.
🌐
Cross-Chain R&D
Ongoing monitoring of chains, standards, and protocols so your gTLD doesn't age out of relevance after launch.
🤝
Registrar Partnership Guidance
Identifying the right partners and navigating onboarding fees, domain search placements, and marketing programs. Registrar buy-in makes or breaks a gTLD launch, especially one introducing technology most registrars haven't seen before.
🎯
Go-to-Market Strategy & Promotion
Positioning, and ready-to-use marketing assets, plus access to our Digital Asset Reward Engine (DARE), which has already delivered Bitcoin and stablecoin rewards directly to .locker registrants.
Proven in Production

Everything you need to accomplish, .locker has already navigated.

Orange Domains has first-hand experience in designing, launching, and managing an ICANN-accredited Web3 gTLD.

Smart contract authorship, audited and live on Mainnet
Two independent builds across Bitcoin and Ethereum naming protocols, plus ENS-standard registrar and resolver contracts, publicly verified and in active operation.
Source-of-truth architecture design
Systems that keep the registry, not the blockchain, in control, while enabling full onchain functionality. The judgment behind this design is exactly what the Technical Study Group will be addressing in their report.
Registry-grade lifecycle engineering for Web3
Onchain lifecycle logic that coexists with ICANN data requirements, availability checks, conflict handling, and both permissionless and registry-governed modes.
Cross-chain migration planning and execution
Real registrants moved across blockchains in production without disruption.
Full-stack Web3 development
Developer SDKs, 100+ endpoint APIs, cross-chain indexing, wallet-compatible NFT metadata, and automated security testing, built end-to-end by the same team.
Post-launch operations and incident response
Infrastructure management, wallet administration across live reward programs, and real incident response for a live registrant base. Day-two experience can't be replicated with documentation.

Let's talk about what consulting looks like for your Web3 gTLD.

Whether you're submitting an application or preparing to build post-delegation, we'll put together a plan shaped around your gTLD, your stage, and your timeline.

Don Ruiz — General Manager
Orange Domains