Re:RFC 9498 on the GNU Name System
by Karrot_Kream on Tuesday November 21, 2023 @04:35PM
(#38370583)
TLS certs without having to buy a domain? Create a GNS domain, set a LEHO record with the necessary Host name, and make your cert based on that? Obviously you'll need a CA that's willing to issue certs for GNS LEHO names, but that way you can use the current TLS CA system to a domain without having to actually spend money on one. Alternatively, have the CA issue wildcard certs for zTLDs and then you can manage your own zTLD without issue.
Letsencrypt allows to produce TLS certificates for free, under a reasonable, globally trusted CA.
If we wanted to go away from centralization here, that would require a serious breakthrough, the magnitude of Bitcoin.
Re:RFC 9498 on the GNU Name System
by Karrot_Kream on Wednesday November 22, 2023 @07:54PM
(#38387689)
Sure but that's contingent on owning or being able to host something under a domain.
Because if globally unique, human-readable DNS still works, I see no point in migrating off it. If the point is smoother migration, then we should start forgetting about human-readability, because it's going to disappear anyway.