ICANN and DNSSEC Haven't seen much on this topic yet, so here goes. As you've probably figured by now, ICANN controls the so called root servers of the domain name system. These root servers are what your ISP uses to find out the actual name servers associated to a domain name after which it will query those for the IP address to connect to. Up until now there's been nothing to prevent others from running their own root servers and use those instead of ICANNs. In fact, over the years, many have recognized the danger Q is currently pointing out and have tried exactly that: to remove ICANNs monopoly by creating alternative root servers. Alternet was the most famous attempt at this, but there haven been (and still are) other smaller efforts. Unfortunately nothing really successful.  Enabling Dnssec will make alternative root servers impossible. Dnssec works by signing domain data and starts at the root servers. Because any alternative root server you may create will not have the keys required to sign domains (at least not the ones your ISP or computer expects) your own root servers will be dead in the water.