News for hackers. Stuff that matters.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Saturday January 28, 2023 @01:08PM (#34559904)
If there’s an area where a decentralized blockchain has application, it is surely DNS and the rent-seeking certificate infrastructure.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by teddyh on Saturday January 28, 2023 @01:29PM (#34560098)
The “rent-seeking certificate infrastructure” could be solved if web browsers used the DNS (and DNSSEC) to validate certificates. The DNS, on the other hand, is more tricky. If you want human-readable and globally distinct (and stable) names, you have to have a centralized structure to keep track of who has what name. The best we could come up with was the DNS, which is at least hierarchical instead of completely monolithic. And then it becomes a question of: do you want name holders to continually pay for names in some way, or do you want a land grab model where the person who snagged a name 30 years ago now owns it forever for free? With DNS, that question is decided by each node in the tree of the hierarchy.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by zozbot234 on Saturday January 28, 2023 @01:46PM (#34560277)
Human-readable names can potentially be pseudo-random, and thus securely generated. What's hard (indeed, considered largely infeasible) is meaningful, decentralized, secure names.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by px43 on Saturday January 28, 2023 @03:10PM (#34561269)
What part of ENS doesn't meet your expectations?

It wasn't designed to replace DNS, but there are an increasing number of people using it for that.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Saturday January 28, 2023 @04:37PM (#34562216)
It is not always about what something is not doing, but rather the unintended (often malicious) use cases it enables without any way to prevent or mitigate.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by viksit on Saturday January 28, 2023 @04:56PM (#34562387)
curious what “malicious” use cases a decentralized name registry enables that dns doesn’t?
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by rvz on Saturday January 28, 2023 @06:37PM (#34563164)
[cricket tunes intensify]
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by loktarogar on Saturday January 28, 2023 @07:24PM (#34563502)
you're focusing on the first part (what it enables) and not the last part (without any way to mitigate)
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @05:03AM (#34566623)
This, for example I lost my keys or my keys were stolen
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by viksit on Sunday January 29, 2023 @11:37PM (#34575814)
ah interesting. won’t multi sig solve this issue? create multiple keys, and have a 2/3. if you lose one, hope you don’t lose the other.

and also - there may be a way for the naming contract to use social recovery for keys.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by gruez on Saturday January 28, 2023 @04:05PM (#34561849)
>Human-readable names can potentially be pseudo-random

No matter how you dice it, getting humans to remember 128 bits of entropy is going to be a non-starter. Encoding those 128 bits using words doesn't really solve the problem.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by cdev_gl on Saturday January 28, 2023 @05:17PM (#34562589)
I was going to argue that remembering "CorrectBatteryHorseStaple.com" is leagues easier than remembering an 128 bit number, but then I did the math and using the 20k most common english words to encode 128bits you'd need an 8 word phrase, which pretty much solidifies the point you've made.

I mean, people can recite poetry far longer, even nonsense poetry ("Twas brillig, and the slithy toves / did gyre and gimble in the wabe") so it's not impossible. But generally speaking, yeah. Nobody wants to navigate to that bit of jabberwocky instead of google.com

It does kind of make me long for the days of the HOSTS file, where anyone might alias a hard-to-remember address as something locally meaningful.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kragen on Saturday January 28, 2023 @05:34PM (#34562727)
it was considered infeasible until bitcoin demonstrated that it was feasible, as zooko agreed: http://www.aaronsw.com/weblog/squarezooko

http://web.archive.org/web/20210118172102/https://squaretria...

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by flir on Saturday January 28, 2023 @08:30PM (#34563965)
The problem I've got with any signed, cryptographically secure replacement for DNS (including a blockchain-backed solution) is that over time names will be lost. Just like bitcoins get lost.

You need some kind of "admin access" for the system that can fix things like lost keys, at which point you might as well stick with DNS.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kragen on Saturday January 28, 2023 @08:33PM (#34563982)
or you could stick with losing the names

aaronsw proposed that you could expire unrenewed names after 12 months

i forget what solution namecoin and ens use

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by flir on Saturday January 28, 2023 @09:02PM (#34564117)
I hadn't considered expiry. It lets lost names re-enter the pool, at least, even if not under the control of the original owner.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Saturday January 28, 2023 @04:17PM (#34561979)
I think something that is overlooked in this discussion is the idea that names must be unique. If we relax this constraint, the solution space opens up significantly. I don’t believe uniqueness is a fundamental requirement of a name service because I don’t believe that a human-readable string itself carries sufficient information to be trustworthy in and of itself.

(Sorry for the delayed reply, my account is heavily rate limited, so I don’t get to post more than 5 times per hour and less when someone with high karma like downvotes a post and leaves a comment.)

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by Stratoscope on Saturday January 28, 2023 @08:51PM (#34564066)
I wonder if you are just seeing the standard five-minute delay that everyone gets when replying inline in a thread. That delay is indeed intended to discourage too-fast back and forth comments, which sometimes lead to arguments.

If that is what you've encountered, you can bypass the delay by clicking the timestamp of the comment you want to reply to. This opens the comment in its own page with a reply box.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Sunday January 29, 2023 @12:31AM (#34565234)
Thanks, but no, I don't think that's what's going on here. What I'm experiencing is 60+ minute rate limits after 5 comments plus maybe 5 edits ("You're posting too fast, please slow down. Thanks."), frequently coinciding with higher karma (15k+) users leaving the first reply and a -1 or -2 downvote balance that usually eventually fights its way back up to +1 or +2. When this happens, I'll try to post every 20 minutes or so to test the boundary. Of course, doing that might be tripping a sliding window, or it might be indeed a stricter rate limit. It's hard to know for sure what's going on. In any case, I don't expect an explanation, if the site is really giving super downvotes to certain users with or without their knowledge, telling people that that's the case would undermine the impact of the approach.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by webmaven on Saturday January 28, 2023 @10:01PM (#34564427)
> I think something that is overlooked in this discussion is the idea that names must be unique. If we relax this constraint, the solution space opens up significantly.

Hmm. At some point, a user agent would need to disambiguate between competing identical names somehow (at least for the sort of names that identify global internet resources). Are you assuming the existence of a web-of-trust of some sort as an arbiter?

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Sunday January 29, 2023 @12:58AM (#34565363)
Well, at some point the end-user will have to make a judgement call about the authenticity of the server they're interacting with, but that is no different from what happens now.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by DennisP on Saturday January 28, 2023 @05:14PM (#34562566)
> If you want human-readable and globally distinct (and stable) names, you have to have a centralized structure to keep track of who has what name.

Apps on blockchains already play the role of that centralized structure. The most successful I'm aware of is ENS on Ethereum. Whatever economic model you prefer can be implemented this way.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Saturday January 28, 2023 @05:47PM (#34562822)
>land grab model where the person who snagged a name 30 years ago now owns it forever for free?

This is already the case with the current dns, since paying $10 per year is pretty much nothing to any middle class investor, so they do in fact "own" it forever for "free", relatively speaking.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by ipaddr on Saturday January 28, 2023 @09:29PM (#34564275)
If I had 10 dollars a year from everyone saying this I would be a new FAANG. Why is everything aimed at middle class Americans.. the average salary around the world is a lot smaller and many domains extensions exists which Americans can't buy.

The early adopters got the first twitter names, instagram names, etc for free forever. People invested time signing up when you never thought of it and they get rewarded.. the platform gets the early adopters. We don't force users to pay and let other take the name and continue to be that person.

Domains should be the same. When a domain expires someone can buy it and pretend they are the original owners.

If they were free you could buy coolformatbestnamecoolformat still get the name you wanted and use a prefix postfix custom format to identify with a group. rubycooldomainruby reactcooldomainreact

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by tptacek on Sunday January 29, 2023 @12:53PM (#34570652)
Anybody involved in a "rent-seeking certificate infrastructure" is doing so by choice. Certificates are free. ISRG saw to that. Web browsers aren't going to use DNSSEC.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by tptacek on Saturday January 28, 2023 @01:24PM (#34560060)
Certificates are free, and all certificates are surveilled with a cryptographically secure append-only log. Meanwhile, if you think the biggest problem with the DNS infrastructure we have now is rent-seeking, take a look at the blockchain alternatives that have been proposed. There might be no modern analog to "attempting to sell the Brooklyn Bridge" more fitting than blockchain DNS.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by Nuzzerino on Saturday January 28, 2023 @01:49PM (#34560315)
Can you name some examples?
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by Yeahsureok on Saturday January 28, 2023 @02:41PM (#34560893)
> attempting to sell the Brooklyn Bridge

Handshake reserved the top 100,000 Alexa domains and allowed all trademark name holders to claim theirs.

Not to mention the ten million in FOSS grants for developers to build tooling

Sadly the ideologues will somehow decry their attempts for an alternative while defending the indefensible ICAAN.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Saturday January 28, 2023 @04:39PM (#34562231)
What about everyone else after the 100k? What recourse are they left with when their domain is/was taken by another party? Which party should own the domain? How would doubly registered domains be resolved?
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Saturday January 28, 2023 @05:30PM (#34562688)
They will remain on their original tld, so brand.com will remain brand.com, they just won't automatically receive their own brand tld, unless they manually start the auction themselves.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @05:02AM (#34566619)
so those below 100k were not reserved, a squatter bought their brand tld, what recourse do they have? What about new brands that have reached the 100k mark since the great reservation?
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Sunday January 29, 2023 @06:39AM (#34567177)
if a brand was not significant enough to reach internet search significance why should they be entitled to their own tld? why should be some company "co" from country x be more entitled to their own tld than the company co with the same name from country y? If they feel they are, they can a) manually start and win the auction b) buy the tld c) use an alternative like .brandHQ,.getbrand,.usebrand or whatever c) just keep using their original domain brand.com, which is the most simple and straight forward solution that requires no effort on their part.

By your logic the evolution of the internet would forever stagnate because developers would be stuck reserving an infinite amount of tlds that keep on popping up, it's just unrealistic and not pragmatic. reserving 100k of the most popular domains is a good faith effort and a pragmatic solution.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @06:43AM (#34567191)
this is the attitude that makes the handshake community untenable

> By your logic...

Did you mean by your imagination to put words in another's mouth? Your ability to ascertain (assume?) so much from an internet question is impressive

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Sunday January 29, 2023 @06:48AM (#34567216)
Am I supposed to respond to your half baked thoughts that do not even amount to an actual argument with a counter argument when there is nothing to counter?

Try putting some effort into formulating an argument, this behavior of yours won't cut it.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @06:55AM (#34567262)
Was I trying to make an argument?

I'm pretty sure I was asking about edge cases that are hard to deal with so that I might understand how the other party thinks before formulating deeper opinions.

Are you seeing straw men where there are none?

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Sunday January 29, 2023 @07:05AM (#34567335)
>Was I trying to make an argument?

No and that's exactly the problem, we're not on reddit. You asked me a question and I elaborated in a detailed manner to which you responded in a low quality manner with no substance which was just name calling.

>I'm pretty sure I was asking about edge cases that are hard to deal with so that I might understand how the other party thinks before formulating deeper opinions.

I gave several perfectly valid solutions that are pragmatic and realistic, if you don't like them, then you can point them out and explain your reasoning but resorting to hand-wavy rants won't be constructive or helpful for any serious dialogue.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @07:28AM (#34567469)
> why should be some company "co" from country x be more entitled to their own tld than the company co with the same name from country y?

Because in some cases, that is the rule. See Rule #5 https://github.com/handshake-org/hs-names

> if a brand was not significant enough to reach internet search significance why should they be entitled to their own tld?

Why should any brand be entitled to such things?

> but resorting to hand-wavy rants won't be constructive or helpful for any serious dialogue.

Can you quote where I did this? I could for you

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Sunday January 29, 2023 @07:35AM (#34567513)
> Because in some cases, that is the rule. See Rule #5 https://github.com/handshake-org/hs-names

How does the rule in any shape or form contradict what I have stated? It says: "The domain must not collide with a higher-ranked domain. For example, google.co.uk would lose to google.com. Only the owner of the higher-ranked domain is able to redeem it"

Point is that many developers invested a lot of time and effort into establishing rules for reservation to maximize fairness, so when a domain is not reserved my statement above applies: why would some company co in country x be more entitled to the one in country y? After all the reservation rules have been applied and determined some specific reservation outcome. There are some proposed solutions in that case too, some of which I have outlined before.

>Why should any brand be entitled to such things?

Exactly, but you are the one making a fuss about in the first place.

>Can you quote where I did this? I could for you

I already did, it's your rant directly to my long elaboration to your question. I'm not going to further entertain your flame baits, everybody can see how much effort each of us put into thoughtful responses and can judge accordingly.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @07:50AM (#34567614)
>Why should any brand be entitled to such things?

>> Exactly, but you are the one making a fuss about in the first place.

Does this mean you believe there should not have been any reservations?

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Sunday January 29, 2023 @07:53AM (#34567634)
No, I was merely jestingly pointing out the inconsistency in your thinking.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by verdverm on Sunday January 29, 2023 @09:05AM (#34568192)
> No, I was merely jestingly pointing out the inconsistency in your thinking.

How are we to believe anything you have written is in good faith?

Can you explain my thinking and where it is inconsistent?

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by tptacek on Saturday January 28, 2023 @07:40PM (#34563632)
Oh, that's nice of Handshake. Definitely it makes sense to me now that Handshake should be able to sell the domain namespace! Why not, if they're going to donate to FOSS?

My question to you is: if I donate MAC addresses to FOSS projects, can I tokenize ARP? I promise to be nice about it. The first 10,000 IP addresses can have their ARPCoin for free.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Saturday January 28, 2023 @04:40PM (#34562238)
Thomas, I’m not sure what you mean when you say that certificates are free. Self-signed certs are free, but only situationally useful in a business context. Let’s Encrypt certs are free, but not usable in all contexts. GoDaddy, Namecheap, and Verisign will still gladly charge $50-$1500 for certs will various features like $50/SAN, and extended validation. If you want to terminate TLS at an AWS managed edge resource, the happy path is ACM. These are “free”, but arguably you’re paying for the cert with the load balancer or edge resource.

There’s no difference between a blockchain and a cryptographically secure write ahead log, indeed that is how blockchains are defined. Perhaps you assumed that I meant cryptocurrency when I said blockchain? I did not.

(Sorry for the delayed reply.)

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by tptacek on Saturday January 28, 2023 @07:41PM (#34563642)
Tell me more about the contexts in which you can't use LetsEncrypt certificates.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by ipaddr on Saturday January 28, 2023 @10:04PM (#34564452)
Older OS. Certbot only supports a limited number of OS (centos 6 not so much). Longer expiry dates.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by devman0 on Saturday January 28, 2023 @10:25PM (#34564555)
Certbot isn't the only way to automate Let's Encrypt certificate issuance, and even if it was, you can use hooks to have certbot push certs to other machines.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Sunday January 29, 2023 @12:50AM (#34565314)
Sure - for example, when the organization requires an OV or EV certificate.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by tptacek on Sunday January 29, 2023 @12:51AM (#34565318)
Yeah, and that happens where?
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by akerl_ on Sunday January 29, 2023 @01:18PM (#34570955)
What’s the use case for OV/EV certs? I thought it was reasonably well established that they herald from the same era as “this site secured by Symantec” icons, and were basically just the same security as DV certs but with the wheels painted chrome and an extra tax for gullible buyers.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by tptacek on Sunday January 29, 2023 @06:04PM (#34573728)
It doesn't matter, right? Because anyone who relies on OV/EV certs has chosen to rely on OV/EV certs. If we replaced the whole WebPKI edifice with a blockchain, they'd still make the same decision not to trust the baseline system.

When we talk about the WebPKI being coercively annoying, what we're really talking about are the roots of trust that the browsers have chosen to trust. No browser requires OV/EV.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Monday January 30, 2023 @11:31AM (#34582099)
Yes, a baseline system built on a blockchain could support the validated identity and KYC features of OV/EV certificates. Indeed, this already exists in Sovrin (sovrin.org).
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by politician on Monday January 30, 2023 @11:16AM (#34581781)
The use case is knowing that a server is owned by who it says it's owned by as validated by a trusted KYC provider. For example, Stripe has an EV cert. Let's Encrypt does not support OV/EV because they cannot automate the KYC checks. Let's Encrypt is focused on the encrypted connection use case.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by dimmke on Saturday January 28, 2023 @01:11PM (#34559935)
You know what? You're right. That's literally the only proposed blockchain application I think I've ever read that I think would actually work.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by jeroenhd on Saturday January 28, 2023 @02:08PM (#34560491)
I don't think it would. The moment the blockchain would start getting any traction, the big blockchain companies would use their capital to get their hands on every recognizable domain name and within days the only remaining "domains" would look like passwords. You could then probably buy readable domains for exorbitant amounts of cryptocoins.

I prefer the current registrar setup over anarchist blockchain hellscapes. You can sue Verisign, you can't sue 0xEf1c6E67703c7BD7107eed8303Fbe6EC2554BF6B.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by from on Saturday January 28, 2023 @03:10PM (#34561260)
You know domain sniping already happens right? There is extensive auctioning infrastructure. And most of the good names were claimed a long time ago. The only way to get an existing domain name without paying the owner for it is to sue over trademark violations or stuff like that which often will cost more than just buying it.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by jeroenhd on Saturday January 28, 2023 @03:40PM (#34561591)
Domain sniping already happens, sure. However, squatters need to invest time and energy into registering these domains whereas a cryptographic system can do all that offline inside the data centers of the cryptosquatter.

Some TLDs have provisions against domain squatters and in case of copyright disputes, you can sue the squatters (or request ICANN to release the domain if that isn't possible for some reason). If you have a good reason to demand a domain currently unused, there are ways to get it.

With crypto-TLDs, nike.com and microsoft.com would be registered by a malicious player without any kind of recourse. The lack of enforceability makes the entire system pretty useless the moment it takes off.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kelthuzad on Saturday January 28, 2023 @06:12PM (#34562987)
> However, squatters need to invest time and energy into registering these domains whereas a cryptographic system...

The auction system is actually fairer since it gives enough time for every party to bid the highest amount according to their interest instead of relying on sniping services like in the current legacy systems.

> whereas a cryptographic system can do all that offline inside the data centers of the cryptosquatter.

what does this even mean?

>Some TLDs have provisions against domain squatters and in case of copyright disputes, you can sue the squatters

Sure, but this is also a double edged sword, since it also opens up abuse i.e. reverse domain hijacking which is a real and common problem. Just this week Charles Schwab tried to rob the legitimate owner of a domain that contained "Schwab", while they tried to hide the fact that the owner's name is also Schwab. [0]

>With crypto-TLDs, nike.com and microsoft.com would be registered by a malicious player

That's why good builders put in the time and effort to reserve these names from the start.

>The lack of enforceability makes the entire system pretty useless the moment it takes off.

Sovereignty has its price. No system is perfect, everything has its trade-offs, but I see a lot of people highlighting the best properties of the legacy system while ignoring the best properties of the new systems. The comparisons should be fair and compare the full range of positives and negatives instead of picking and comparing in a bad faith manner.

[0] https://domainnamewire.com/2023/01/24/charles-schwab-tries-t...

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by detrites on Saturday January 28, 2023 @03:22PM (#34561400)
There's a simple solution for that: to buy a domain on-chain that has an equivalent off-chain, the existing owner first needs to prove ownership of that equivalent domain. After, it can be sold freely (as uniques could already).

The on-chain contract could be written such that a buyer generates a token, supplied to an on-chain verification oracle that checks token.owned-domain.TLD exists, and if it does grants issuance of the new on-chain version.

This essentially allows for a fair transition from the old system to the new system, while eliminating squatting.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by jeroenhd on Saturday January 28, 2023 @03:44PM (#34561634)
What happens to these domains when the "legacy" domain expires and gets re-bought? Do you lose access when you stop paying? What if someone managed to hack your DNS, does it and its integration with TLS then break the supposed security guarantees?

This system just seems to be traditional DNS with extra steps and a lack of manual recourse against bad actors, to be honest.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by detrites on Saturday January 28, 2023 @04:54PM (#34562374)
The first question is irrelevant and affects nothing - the same owner proves ownership of both at the outset, if they choose to let the legacy version expire, well they chose that - so who cares what happens to it?

I suppose it could be configurable at purchase to allow it to be a recurring verification, if that was desired, but it would seem to overcomplicate for no reason. "Subscribing" to domains each year is legacy inefficiency.

I'm not sure what you mean about DNS, any chain-based system would be... chain-based, and therefore cryptographically-assured that a domain points where the owner chooses. "Not your keys, not your domain" applies.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by DennisP on Saturday January 28, 2023 @05:21PM (#34562620)
I don't think that's happened on ENS so far, though there is some domain squatting just like there is on DNS.

Though ENS doesn't implement this, it'd be possible to add paid arbitration by humans for resolving trademark disputes. You couldn't get damages but you could get the domain.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by dimmke on Saturday January 28, 2023 @05:50PM (#34562848)
Good points, but I have to point out that what you're describing is literally what happened with our current system, just less extreme.

I was recently quoted $250,000 to buy a .com that is not being used and as far as I can tell has never been used but some guy bought in the 90s when I was a young child. Aside from the level of extreme is that really different from "You could then probably buy readable domains for exorbitant amounts of cryptocoins."

You touch on what I think the core issue is with domains when you talk about suing Verisign. In some very limited cases, it's possible through litigation to get a domain you feel like you should have. But therein lies the crux of the whole issue: What standard needs to be met before you qualify for a domain name, especially one that is in contention?

In cryptocurrency, the criteria to receive the currency was originally solving problems with computing power because they needed some arbitrary measure. In the world of domain names, it's been a lot of different things but mostly just money and time.

That standard - what "qualifies" you to own a domain over someone else I think would have to be decided before truly effective regulation can be made or enforced, blockchain or not. Right now it's basically temporal, with some carveouts from lawsuits for trademarks.

The current regulations around how domain names work is woefully inadequate (like most regulation around technology) and gives outsized power to private entities. This is something that I think people don't talk about enough when they criticize blockchains.

If there was a better job being done with public policy, you'd likely have less people who think a system where there's no way of imposing real regulation is desirable.

It's especially bad with technology. My go to example is Apple's App Store, but this area is a good topic too.

To me, a happy mix of public/private policy would be best. The government allowing private TLDs, but regulating them. An anti squatting law, price capping new TLD name registrations, an enshrined "specificity system" to claiming an unused (or even used) domain would make the situation so much better, but it'll never happen.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by MrOwnPut on Saturday January 28, 2023 @03:50PM (#34561701)
It's been working... for awhile now. But no traction here because... crypto = bad.

There's Handshake, ENS, and UnstoppableDomains.

Brave supports .eth domains out-of-the-box, hopefully Handshake soon.

For Handshake you can use a local resolver that reads the blockchain or use NextDNS.

NFTs aren't just for art, y'know. They have real [digital] world use cases for ownership, like DNS.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by janosdebugs on Sunday January 29, 2023 @02:51AM (#34565880)
There is no traction because it's a vanity item. Most people/businesses need their websites to work on the average Joe/Jane's mobile phone, not just on some specialized browser that only a few people use. (=Chrome, Safari, Edge)
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by MrOwnPut on Sunday January 29, 2023 @11:59AM (#34570023)
So tech here doesn't gain traction unless the average Joe already uses it?

And Brave and NextDNS aren't popular enough for your threshold?

Handshake is exactly what would stop the issue happening in TFA, yet everyone ignores it here.

For something to go mainstream, you have to talk about it...

HN is not a very good tech site if you only talk about the tech that the common person already knows about.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by janosdebugs on Monday January 30, 2023 @03:41AM (#34577305)
For some products, yes. For example, if you were to make a social media network that targets the general populace for finding their real life friends, it wouldn't work unless you had... well, the general populace on it. No matter how awesome the technology would be. The same with DNS replacements.

The projects mentioned in this thread aren't the first to offer an expanded DNS solution for one reason or another. None of them gained traction.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by rvz on Tuesday January 31, 2023 @08:03AM (#34594544)
> For some products, yes. For example, if you were to make a social media network that targets the general populace for finding their real life friends, it wouldn't work unless you had... well, the general populace on it.

Hence why Twitter still has no viable competitor or replacement, especially when the money is still there despite all the hype and mania of it 'dying'.

Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by kragen on Saturday January 28, 2023 @02:10PM (#34560513)
You're looking for the Ethereum Name Service.
Re:Domain Registry Takes Sci-Hub’s .SE Domain Name Offline by agilob on Saturday January 28, 2023 @02:50PM (#34561003)
Literally one of the first applications of a blockchain tech

https://www.namecoin.org/