On second thought ICANN might be able to just because you can't really get an SSL certificate for an IP address. And I don't know of many federated services that are exclusively over Tor or I2P with .onion or .i2p extensions