Your .com Renews at $10.97 in November: The Tenant Domain Bill Your PaaS Can't Automate Away
Verisign raises wholesale .com prices to $10.97 on November 1, 2026, while uncapped registries reprice at will — .info is up 75% since 2019. Here is what tenants actually pay per domain, what a self-hosted PaaS automates to zero, and the registrar bill no platform can touch.
PowerDNS as a Self-Hosted Route53: What Owning Your DNS Layer Really Costs
At 1,000 tenant domains Route53 bills around $620 a month while a two-server PowerDNS setup costs $10–55 plus an ops bill of monitoring, patching, and DNSSEC key ceremonies. Here is the full math and the rule for when owning your DNS layer pays.
PowerDNS Operator: The Last Layer a Self-Hosted PaaS Still Outsources
PowerDNS Operator turns DNS zones and records into Kubernetes Custom Resources so tenants can self-serve custom domains via RBAC instead of a shared API credential — here's the CRD model, the win over external-dns, and the anycast tradeoff it doesn't solve.
One DV Certificate Per Tenant Domain vs Wildcard TLS: The Multi-Tenant Pattern a Self-Hosted PaaS Actually Needs
Wildcard TLS stops covering anything the moment a tenant brings their own domain. Here's the concrete cert-manager and acme.sh architecture — bind-time issuance, renewal fan-out, and offboarding revocation — that replaces it, with the Let's Encrypt rate limits and 45-day certificate timeline that make it non-negotiable.
Let's Encrypt's DNS-PERSIST-01: One TXT Record Replaces Every Renewal for Multi-Tenant TLS
A new Let's Encrypt challenge type lets a tenant authorize a platform's ACME account once instead of on every renewal — here's the record format, the security tradeoff, and what it changes for a self-hosted PaaS issuing certs at fleet scale.
NameFi.io: Turning Every Domain into a Programmable Asset
Explore how NameFi.io is revolutionizing domain management by transforming traditional Web2 domains into NFTs, enabling seamless integration with Web3, enhanced security, and financial composability.