The .io TLD Has a Political Problem

Every time a developer registers a .io domain, they’re making a quiet bet on the continued existence of a place almost none of their users could find on a map.

The pun is the whole appeal. .io reads as input/output, the most native two letters a technical person could ask for. Game studios, dev tools, crypto projects, and a decade of startups adopted it as a de facto “tech TLD” — the domain that signals you’re building something for people who know what a socket is. Nobody registering getsomething.io thinks they’re taking a position on decolonization.

But .io is a country-code top-level domain, and the country it codes for is the British Indian Ocean Territory. That’s not trivia. It’s the entire foundation the domain sits on, and the foundation is being dismantled right now.

The two letters aren’t “input/output”

ccTLDs don’t get invented by whoever thinks they look cool. They come from ISO 3166-1, the standard list of two-letter country codes. IO was assigned to the British Indian Ocean Territory, a cluster of atolls in the middle of the Indian Ocean that the UK carved out of its Mauritian and Seychellois colonies in 1965. IANA delegates a matching ccTLD for codes on that list, which is how a territory with a permanent civilian population of roughly zero ended up with one of the most valuable domain extensions on the internet.

The population is zero by design, and this is the part the input/output joke papers over. In the late 1960s and early 1970s the UK forcibly removed the entire Chagossian population — the people who actually lived there — to make room for a joint US-UK military base on the largest island, Diego Garcia. They were deported to Mauritius and the Seychelles and spent the next half-century fighting in court to go home. The “British Indian Ocean Territory” is, in practical terms, a military base and an empty archipelago that its former inhabitants are legally barred from returning to.

That’s the country behind the country code.

Where the money went

The domain has been a real business for a long time, and for most of that history the people with the strongest moral claim to the territory saw none of it.

.io was delegated in 1997 to a British entrepreneur, Paul Kane, who ran it through the Internet Computer Bureau. In April 2017 he sold that company to the registry operator Afilias for about $70 million — a number that tells you how much a good pun is worth at internet scale. Afilias was folded into Identity Digital in 2022, which runs .io today. Somewhere in there the domain was generating on the order of seven million dollars a year.

In July 2021, the Chagos Refugees Group filed a complaint seeking repatriation of the domain and back royalties on that revenue. Their argument was straightforward: the money is being extracted in the name of a territory they were expelled from, and none of it reaches them. Whatever you think of the legal merits, it’s a clean illustration of the problem. The .io in your URL bar is monetizing a colonial cartography exercise, and the proceeds flow to registry operators, not to the displaced.

You don’t have to resolve the ethics to notice that “it just means input/output” is a story that helps everyone not look at this.

The ground is now literally shifting

For years this was an interesting-but-academic footnote. It stopped being academic in October 2024, when the UK announced it would hand sovereignty over the Chagos Archipelago to Mauritius. The treaty was signed on 22 May 2025. The UK keeps a 99-year lease on the Diego Garcia base; everything else goes to Mauritius.

Here’s the detail that matters for the domain: the treaty text doesn’t mention the British Indian Ocean Territory at all. If BIOT ceases to be a distinct territory, the IO code loses its reason to exist in ISO 3166-1 — and a ccTLD’s eligibility is tied directly to that list. When a code comes off the list, the domain built on it becomes, by policy, a candidate for retirement.

This is not hypothetical. It’s happened before, more than once.

What happens when a country disappears

IANA has an actual process for this, and a track record. When a territory’s ISO 3166-1 code is withdrawn, the corresponding ccTLD is supposed to be retired after an orderly transition — five years by default under the ccNSO retirement policy ICANN’s board approved in 2022.

• Yugoslavia (.yu): ISO pulled the YU code in 2003. After a transition to Serbia’s .rs and Montenegro’s .me, .yu was shut off in March 2010.
• Netherlands Antilles (.an): the territory dissolved in 2010; registrants were migrated to .cw, .sx, and .bq, and .an was gone within five years.
• Zaire (.zr): became the Democratic Republic of the Congo, and .zr was replaced by .cd.

So the machinery exists, it works, and it has eaten domains before. The counterweight — and it’s a real one — is .su. The Soviet Union dissolved in December 1991, and .su is still here, with something like 100,000 registrations, because the Russian internet community kept using it and nobody forced the issue. For thirty years .su was the proof that a ccTLD can outlive its country indefinitely if enough people are motivated to keep it alive.

Except even that exception is closing. In early 2025, IANA’s operator notified the .su administrator of a planned phase-out by 2030. The last great argument for “ccTLDs never really die” is now on a clock.

The honest read

Let me be clear about what I’m not saying. .io is not going to vanish next year. ICANN’s own commentary on the Chagos handover made the sensible point that a change in sovereignty doesn’t automatically kill a domain, and that the policy timelines give the community years — plausibly a decade — to adapt. Nobody’s site breaks in 2027. If you run a .io today, this is a slow-moving risk, not a fire.

But “slow-moving risk” is still a different thing from “neutral technical choice,” and the whole .io brand was built on pretending it was the latter. The pun let a generation of builders adopt a domain without ever registering that the letters stand for a specific, contested, half-empty territory whose original inhabitants were deported and are still fighting to return — a territory that two governments have now agreed to dissolve.

The internet is full of these seams, where a clean abstraction is stretched over something political and unresolved. DNS is supposed to be plumbing. You type letters, you reach a server, you don’t think about it. .io is a reminder that the plumbing runs through the real world, and the real world has a habit of eventually sending a bill.

If you picked .io because it looked like input/output, that’s fine — most people did. Just know that you leased a piece of a story that’s still being written, and that the people writing the current chapter aren’t thinking about your startup at all.