The registry points to the book that holds the answer
ENS launched its initial registrar on Ethereum mainnet on 2017-05-04, but the durable idea is smaller than a web directory. The Registry maps a namehash to three fields: owner, resolver and TTL. Resolution first finds the resolver, then asks that contract for an address, text, content hash or another supported record.
That split determines the everyday security boundary. The effective manager can replace the resolver, while resolver permissions decide who edits records. An unwrapped name exposes its manager in Registry.owner(); a wrapped name points the Registry at Name Wrapper and exposes effective ownership through the wrapper. Transferring an ENS token changes none of these fields.
