ICANN with a very robust governance structure that is delegated. Also with DNSSEC extension it eliminates attacks like DNS spoofing.