Nominet calls itself not-for-profit, which is technically true because no-one gets that profit. Really, its more a case of "not-for-dividend" because any profit doesn't go to the members, which discourages carpet-bagging.
Of course, it could stop making a surplus by reducing prices. The board cannot just do that - they'd need the membership to vote for it (weird constitutional restriction of Nominet - not normal for a company). As comments here show, not everyone wants domains cheaper (bulk domainers clearly do, others don't).
So what do you do with the money? There's only so many USB sticks you can buy for techies without breaking the no-dividend rule. They spent a chunk on suing some scammers a few years back. So now the board are giving it to charity (personally, I like the idea - certainly better than giving it to the Government, especially since Nominet isn't Government owned).
As for all this stuff....
>you cant register an IDN - international domain name (xn--) with any
>NOMINET owned addresses (see their arcane rules) - hello? this is 2008
>for f***s sake.
True, but they did a consultation about it, decided that it was difficult and focussed on other things. Read the consultation. Technically it isn't hard for Nominet, but the public don't understand them and customer support would be a nightmare.
>you cant use a direct TLD of .uk (every other country in the world
>does this) - those 5 or 6 that exist redate 1996 when the rule was
>changed to not allow .uk
True, but is that bad? Increases the number of available names - its just that most people only recognise .gov.uk and .co.uk - but that's just advertising to fix.
>Theres still no real moves for .gb release - thanks.
They don't own it. Look at IANA.
>theres still no real move to give scotland and wales their country code
>names either.
They don't allocate top level domains (.scot, .wal etc). Go ask IANA.
>..and dont even get me started on DNSSEC. back in late 2007 they
> published a 'positional paper' which started off bright - they believe that
> it should be done - but by the last couple of pages they finished with a
>dozen cop-outs and tried to infuse a simple matter into something far
>more awkward and custom. hello? RFCs?
The original design allowed the entire .uk domain name list to be stolen, and from that all names and addresses to be taken from the WHOIS. They couldn't implement it. Slow and dull writing a better RFC may have been, but it turned a design that none of the big european registries (who comply with data protection laws) could use into one that they can.