[1vuio0pswjnm7]

"You can only rent a domain."

If ICANN-approved root.zone and ICANN-approved registries are the only options.

As an experiment I created own registry, not shared with anyone. For many years I have run own root server, i.e., I serve own custom root.zone to all computers I own. I have a search experiment that uses a custom TLD that embeds a well-known classification system. The TLD portion of the domainname can catgorise any product or service on Earth.

ICANN TLDs are vague, ambiguous, sometimes even deceptive.

[iampims]

You should write something about this…

[coldfoundry]

This sounds like a wonderful project, do you have any documentation of the process you wouldn't mind sharing? Would love to play around with something similar to what you did, almost like a mini-internet.

[eximius]

Is there any difference here from running a normal DNS server?

Any of your special domains will be ones your server claims as authoritative, so I don't understand why you need a root server?

[1vuio0pswjnm7]

"Is there any difference here from running a normal DNS server?"

Yes.

[quectophoton]

Do you also have a trusted TLS certificate authority? If yes, how has been your experience maintaining and securing it?

[1vuio0pswjnm7]

For this system, I have alternatives to "TLS" and to "trusted TLS certificate authorities".

None of this is connected to the internet. It is "home lab" stuff.

I have alternatives for so-called "modern" web browsers controlled by advertising companies, too.

For all the third-party-mediated stuff on today's internet I generally have alternatives that let me have more control.