ENS (Ethereum Name Service): Architecture, Governance, and DNS Integration

glossary / web3-domain-identity

ENS (Ethereum Name Service): Architecture, Governance, and DNS Integration

ENS (Ethereum Name Service) glossary: smart contract architecture, .eth registry, DAO governance, DNSSEC bridge, and DNS integration.

Definition

The Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. It maps human-readable names — primarily ending in .eth — to machine-readable identifiers such as Ethereum addresses, content hashes, metadata records, and even traditional DNS data. ENS functions as the web3 analog to the Domain Name System (DNS), which the web3 domain identity research explores in depth.

Smart Contract Architecture

ENS operates through a layered smart contract architecture on Ethereum:

  • ENS Registry: A single on-chain contract that maps domain names to their owners and resolvers. The registry stores the name-owner mapping and the resolver address but delegates resolution logic to pluggable resolver contracts.

  • Resolvers: Each name can specify its own resolver contract. The Public Resolver handles standard record types (address, content hash, text records), while custom resolvers enable application-specific resolution logic.

  • Name Wrapper (ERC-1155): Introduced in 2023, the Name Wrapper converts .eth second-level domains into ERC-1155 NFTs with fine-grained permission controls — allowing subdomain issuance, expiry management, and fuse-based restriction of owner capabilities.

  • Reverse Registry: Enables address-to-name lookups, allowing wallets and dApps to display .eth names instead of hexadecimal addresses.

.eth Domains

.eth is the native top-level domain of ENS, allocated through a Vickrey auction for names longer than 5 characters and a fixed-price registration for 3–5 character names. All .eth registrations are subject to an annual renewal fee denominated in ETH, paid to the ENS treasury. Unlike ICANN-governed TLDs (WHOIS glossary), .eth domains exist entirely on-chain with no centralized registrar authority.

ENS DAO Governance

In November 2021, the ENS DAO was established with the deployment of the ENS governance token. Token holders vote on:

  • Protocol fee structures and renewal pricing
  • Treasury allocation from registration revenue
  • Upgrade proposals to core contracts
  • Ecosystem grant funding

The DAO treasury holds registration revenue and is managed through on-chain proposals. This governance model contrasts with ICANN’s multi-stakeholder approach to traditional DNS, as detailed in the web3 domain identity FAQ.

DNSSEC Bridge

The ENS DNSSEC bridge enables traditional DNS domain owners to claim their domains on ENS without purchasing a .eth name. Domain owners submit DNSSEC-signed proofs on-chain, allowing .com, .org, and other TLD names to resolve within ENS. This bridge creates a pathway between the ICANN DNS hierarchy and the ENS namespace — a critical interoperability layer for hybrid domain strategies involving crypto payments (buy domain with crypto).

Comparison with Traditional DNS

FeatureENSTraditional DNS
RegistrySmart contract (immutable)Centralized registry operators
GovernanceDAO (token holders)ICANN multi-stakeholder
Top-Level Domain.eth.com, .org, .net, etc.
RenewalETH-denominated, on-chainUSD-denominated, registrar-mediated
ResolutionOn-chain resolver contractsNameserver delegation
Censorship ResistanceHigh (no single authority)Low (registry can suspend)

References

  1. ENS Documentationdocs.ens.domains — ENS Labs
  2. ICANN DNS Overviewicann.org/resources/pages/dns — ICANN
  3. W3C Decentralized Identifiers (DIDs) v1.0w3.org/TR/did-core — W3C

Frequently Asked Questions

What is ENS and how does it differ from traditional DNS?

ENS is a decentralized naming protocol on Ethereum that resolves .eth names to wallet addresses, content hashes, and other records. Unlike traditional DNS managed by ICANN and centralized registries, ENS operates via immutable smart contracts governed by a DAO.

How does the ENS DNSSEC bridge work?

The DNSSEC bridge allows owners of traditional DNS domains to import their DNS records on-chain by proving ownership through DNSSEC signatures, enabling .com and .org domains to resolve within the ENS ecosystem without purchasing a separate .eth name.

Who governs the ENS protocol?

The ENS DAO, composed of ENS token holders, governs protocol upgrades, fee structures, and treasury allocation. The core development team (ENS Labs) implements decisions approved through on-chain governance votes.

Web3 Domain Institute Editorial Team

The editorial team maintains pages through a research-content workflow, checking definitions, risk boundaries, internal link structure, source references, and update timestamps. Reviewer: Domain Infrastructure Research Desk.