News for hackers. Stuff that matters.

A comment on Decentralized Naming and Certificate Authority.

Re:Decentralized Naming and Certificate Authority by josh2600 on Wednesday February 12, 2020 @01:33PM (#22311363)
I am actually curious because I don't fully understand how Handshake works... I believe it allows you to setup a K of N threshold signature scheme for changing DNS, which, is kinda cool, but I don't understand if this would help BGP route hijacking.

Edit: I guess this is a replacement for ICANN not the inter-carrier routing protocols, which is, interesting. Is the point here that if DNS authorities switch to Handshake for authoritative DNS it will be harder to hijack routes? I would love an explanation, sorry it I'm being dense!!

[ Parent | on HN ]
Re:Decentralized Naming and Certificate Authority by pinhead26 on Wednesday February 12, 2020 @01:38PM (#22311412)
It doesn't address BGP, just DNS. You are correct about the signature scheme though. In fact, names are owned by unspent transaction outputs, exactly like Bitcoin. Meaning you can own a name with whatever weird script you want (2 of 3 before a certain date, 4 of 5 after...) you can even add scripts that allow certain keys to update a DNS resource, but a different key to transfer the name.
[ Parent | on HN ]