The specification and enforcement of domain policies is disclosed. Input including a second level domain is received. The second level domain is associated with a particular top level domain. A determination is made as to whether a resource associated with the second level domain is consistent with a policy associated with the top level domain. A responsive action is performed based at least in part on the determination.