Enter Somalia market with a .SO Domain

Anyone can. The registry describes .so as an open namespace accepted by every accredited registrar, and it asks for no residency in Somalia, no local contact and no supporting documents. Eligibility checks exist only for the federal state namespaces and the official zones .gov.so and .edu.so, and .so is in neither group. The measurement backs this up: of 47 registered names sampled on 15 August 2026, thirty-seven were held through registrars outside Somalia. Private individuals may register too — the registry defines .me.so in the same open group specifically for personal names.

Three characters. The boundary was measured on 15 August 2026 using randomly generated labels against the registry's own lookup endpoints: every one- and two-character name returned Prohibited String — Domain Cannot Be Registered, while no three- or four-character name did. So labels such as a.so or zq.so are closed by registry policy, whereas three-letter names are on sale. The same floor applies on .com.so and .org.so; there is no relaxation for any one zone. The upper limit is not a registry rule at all but the ordinary DNS label limit.

The name does not disappear straight away. The registry publishes the post-expiry chain day by day: on the expiry date the name auto-renews into a 45-day window, and if that is missed a 30-day redemption stage begins, followed only then by a five-day pending-delete wait. That gives you a total recovery span of 75 days. Redemption can carry a different fee, though, so it is worth renewing before the expiry date. The registry also defines separate five-day grace periods for new registrations, renewals and transfers.

Less than you might expect — and that is good news. The registry server whois.nic.so publishes no registrant name, address, telephone number or e-mail address at all. The response carries only the domain itself, the registry object ID, the creation and expiry dates, the last update, EPP status codes, the name servers and the registrar's details. All 286 names sampled on 15 August 2026 returned the same shape. The practical result is that you never need to buy a separate privacy service to keep personal data off the record. Run a lookup from the whois search page.

On paper they do not differ: all three are namespaces of the same registry, under the same rulebook, the same expiry chain and the same minimum length. The difference shows up in measurement. On 15 August 2026, thirty-seven of 47 sampled .so names sat with registrars outside Somalia; on .org.so 131 of 145 names sat with Somali registrars; and .com.so fell between the two. In short, .so is the short form bought worldwide, .org.so is where Somali institutions live, and .com.so is the commercial middle ground.

A transfer is a defined step in the registry lifecycle and carries its own five-day grace period. The mechanics are standard EPP: the transfer lock on the name must be off, and you pass the authorisation code from your current provider to the new one. You can read the lock state straight out of a WHOIS lookup — a locked name shows a clientTransferProhibited line, an unlocked one shows no such line. Since the measurement found more than twenty different registrars inside a single zone, transfers clearly work in practice. Start yours from the domain transfer page.

No. The .so zone is not signed in the root: a DS query on 15 August 2026 returned an authenticated denial, meaning the chain of trust never begins. Registration level gave the same answer — all 286 names sampled across the three Somali zones came back unsigned, without exception. The registry's promotional pages mention DNSSEC, but measurement does not bear that out. In practice this means you cannot publish a DNSSEC signature for your .so name, and you should build security around a TLS certificate plus the transfer and delete locks offered on the provider side.