You Chose an Extension. You Also Chose a Jurisdiction.
You chose a domain extension for its vibe, thinking it was just a name. In reality, you chose whose laws can take it away—a jurisdiction you can never change without changing the name itself.
You chose the extension for how it reads.
.com because it sounds established. .io because it sounds clever. A country code because it sounds like home.
A branding call. A matter of taste.
It was neither.
The extension is the legal system your name lives under.
Every other decision about your domain name can be undone. You can switch registrar, move host, rewrite the content, sell the company that holds it. The one thing you fixed the day you registered was the body that runs the zone — and the country whose law that body answers to. That choice does not appear on any invoice, and you cannot reverse it without giving up the name.
Behind every extension stands a state
A registry is the organization that operates a top-level domain and keeps the master record tying each name to its holder. You never buy a name from it. You hold a renewable entry in its database. Change the entry and the name moves. Lock the entry and the name is gone.
Behind every registry sits one legal system. The .com and .net zones are run by Verisign, a company incorporated in the United States. The newer endings each answer to a registry that sits somewhere specific as well. And every country-code ending — .de, .cn, .ir, .io — is operated under the law of the territory whose code it carries.
You did not register a name. You registered into a jurisdiction.
And the jurisdiction is not the one where you live, bill, or keep your servers. It is the one stamped on the last letters of your address — chosen, almost always, for how those letters looked.
The .com is a doorway into American law
Start with the ending that feels safest, because it feels like nowhere. A .com reads as global, neutral, unowned. It is none of those things. It is United States infrastructure, and a U.S. court can reach anyone who registers one.
In 2012 a federal grand jury in Maryland indicted Bodog Entertainment Group, a sports-betting business run out of Canada and Costa Rica, for taking bets from gamblers in a state where sports betting was illegal. The operators were abroad. The money moved through Switzerland, England, and Malta. The company was charged, not convicted. None of it slowed the seizure. A Maryland court issued a warrant, and the .com registry handed control of bodog.com to U.S. Immigration and Customs Enforcement.
A year earlier the same program had reached a Spanish company that had done nothing wrong at home. ICE seized rojadirecta.com and rojadirecta.org from Puerto 80, a sports-streaming business a Spanish court had already examined and found legal. The domains stayed dark for a year and a half. Then, in 2012, the government returned them without explanation and let the case drop.
Read those two cases side by side. One holder was accused and lost the name. The other was cleared at home and lost it anyway, for eighteen months, with no charge that ever stood.
A .com puts your name within reach of a court you will never stand in.
The mechanism is the part outsiders never see. The seizure does not happen at your registrar, your host, or your office. It happens at the registry, on the order of the registry’s own government, and your provider simply watches the record change.
A domain name is not taken where you operate — it is taken where its extension is run.
A country code is a government you inherit
Choose a national ending and the knot pulls tighter. You do not just enter a legal system. You adopt a state — its politics, its morality code, its current mood.
In 2010 the Libyan registry deleted a .ly domain name because its content, in the registry’s reading of its own rules, fell outside Libyan law and Islamic morality. The holder had broken no law where he lived. He did not need to. The name sat under Tripoli’s rules, not his. The holder’s own complaint was that the registry judged the website’s content, not just the registration. Every ending tied to a country that filters speech or sits under sanctions carries the same freight: the regime travels with the letters, whether you meant to sign up for it or not.
The flag in your extension flies whether you salute it or not.
The ending can outlive — or outlast — its country
The deepest exposure is the one no contract mentions. A country-code domain rests on the country continuing to exist in the eyes of a list almost no one has read: ISO 3166-1, the standard that decides which two-letter codes are real. ICANN does not judge what is a country. It follows that list.
.io belongs to the British Indian Ocean Territory, whose sovereignty the United Kingdom agreed in 2024 to transfer to Mauritius. ICANN has said plainly that nothing is decided and much of the talk is speculation. But its own rule is on the record: should the IO code leave the standard, a five-year clock starts to retire the domain.
The graveyard is real, and so is the reprieve. When Yugoslavia dissolved, its .yu domain was removed from the internet’s root in 2010, the last of its kind switched off on schedule. Yet .su, the Soviet Union’s code, was dropped from the standard back in 1992 and still runs today — an extension that has outlived its own country by more than three decades, its retirement only now being set in motion.
A naming choice made in a boardroom can come to rest on a treaty, a standards committee, and the survival of a state.
None of those parties knows your company exists. All of them can decide whether your address keeps working.
Even the fight over your name follows the ending
There is a quieter version of the same rule. When someone challenges your right to a name, the forum is fixed by the extension, not by you.
Every gTLD — .com, .net, and every new ending — carries ICANN’s Uniform Domain-Name Dispute-Resolution Policy by default. Anyone in the world can file against your .com before a WIPO panel, and an arbitrator who never enters a courtroom can order the name transferred out from under you. Country codes are not bound by that policy. Each national registry sets its own: some adopt the global rules, many run their own variant, a few send the fight to local court.
So the same trademark dispute over the same brand can be decided under three different systems — chosen by nothing more than the letters after the dot.
What a decision-maker actually holds
Stand all of this up and the shape is plain. Your primary domain name is the one asset whose governing law you never negotiated. You chose it for the sound, and the law came attached: invisible, and impossible to change without giving up the name your whole identity runs on.
You can be flawlessly compliant in your own country and still lose the name — to a foreign court, a sanctions list, a content rule in a capital you have never visited, or a sovereignty deal you are not party to. None of that shows on the balance sheet. All of it shows the day the record changes.
So the extension belongs on the same risk register as the country where you incorporate — legal exposure, and it has been from the first day.
You can move your company, your servers, and your bank.
The one thing you cannot move is the law that arrived with the last letters of your name.
Magyar változat: [zona.hu/vegzodest-valasztottal-joghatosagot-is-valasztottal/]