Re:Handshake: Decentralizing DNS to Improve the Security of ...
by denton-scratch on Wednesday September 18, 2019 @06:33AM
(#21003870)
As far as I can see, I could run a Handshake recursive resolver myself, either for my own internal network, or I could publicise it.
It's not clear to me how a third party could verify that my resolver was returning answers based on blockchain data, though. I suppose the blockchain could be contrived to return DNSSEC signatures, which could in turn be sent by the resolver; so if you trust the blockchain root's DNSSEC signature, then you can trust an arbitrary resolver. But the article didn't mention DNSSEC, or how you establish trust in an arbitrary resolver.
It's not clear to me how a third party could verify that my resolver was returning answers based on blockchain data, though. I suppose the blockchain could be contrived to return DNSSEC signatures, which could in turn be sent by the resolver; so if you trust the blockchain root's DNSSEC signature, then you can trust an arbitrary resolver. But the article didn't mention DNSSEC, or how you establish trust in an arbitrary resolver.