Handshake: Decentralizing DNS to Improve the Security of the Internet

Re:Handshake: Decentralizing DNS to Improve the Security of ... by AstralStorm on Thursday September 19, 2019 @01:17AM (#21013494)

The problem is that you cannot do anything about it, other than suing the author - if you can find them and they're in a reasonable jurisdiction.

Well, you can try to break the system by splitting it in half, introducing an overlapping domain. If collisions is the desired way of dealing with it, the whole thing is ultimately broken.

Just imagine Amazon breaking Google domains because they have a better cloud.

With ICANN and registrars, there is a point you can directly attack legally, and a root of trust.

[ Parent | on HN ]

Re:Handshake: Decentralizing DNS to Improve the Security of ... by lone_haxx0r on Thursday September 19, 2019 @10:25AM (#21016463)

> With ICANN and registrars, there is a point you can directly attack legally, and a root of trust.

For my use case, that's a problem rather than an advantage, as I'm not a holder of important IP works, trademarks, etc.

[ Parent | on HN ]

Re:Handshake: Decentralizing DNS to Improve the Security of ... by donavanm on Thursday September 19, 2019 @02:03AM (#21013709)

Yes, this. DNS and CAs are effectively rooted in internationally recognized legal systems with rules, precedent, and procedure (flawed though they may be). Approaches which circumvent that give up those protections. Which leaves something like “first actor is precedence” and “mightiest compute is rightest.” Maybe theres a technical framework that can address those problems. But I havent seen it before, and its not even mentioned in the parent article.

[ Parent | on HN ]