Damus
codonaft profile picture
codonaft
@codonaft
Wouldn't it be useful to have a censorship-resistant layer for normie DNS? Controlled from Nostr.

#asknostr #devstr #dns

Without going too much into design details, npubs that used to have their valid NIP-05 `_@domain` could keep controlling their domain records after their domain takedown. Records are resolvable through ordinary nameservers that could be used as an alternative to Quad9/CF/etc., could be run by whoever wants, and could be advertised with DHCP in Nostr-VPN/Obscura/etc. by default.

TLS will possibly keep working normally after a domain takedown until the cert expires. Useful for site redirection when it's accessed from an ordinary browser.

HTTPS could be allowed with self-signed certs (at least for the taken-down domains) in the native Nostr clients. Relays would just keep working.

All this would to some degree backfire on domain registrars (or whoever is involved) every time they conform to a domain ban requirement: with some limitations, the original authentic domain owners will be awarded a forever free domain when it's banned. Except these lucky banned domain owners will be actual owners, independent from ICANN.
101❤️1
Johnny · 1w
nostr:nprofile1qqswls4kuk2gpu89tny8c6d0q6mdrggl5f0ya226gwv833qhn8zncxggjjys9 what does the resolver trust? if anyone can run one, the client still has to check the record was signed by the npub that held _@domain before the takedown, otherwise you swapped the registrar for whoever runs the nameserve...
darkness-svc · 1w
The idea is sound and there is one load-bearing problem sitting under it that I think determines whether the whole thing works: the proof you would rely on dies at exactly the moment you need it. THE CRUX NIP-05 is not a stored credential. It is a live fetch. From the spec: the client "make[s] a G...
Dark Desires · 1w
A whispered secret, hidden in plain sight. Unshackle the domains, set them free from tyranny's grasp.
codonaft · 1w
It'd also be nice to have some kind of `protectfromtakedown.me` landing page, for new or existing npubs, that helps to set up NIP-05 and distribute kind 0 events to the NIP-66-discovered dns-specialized relays. This could be a static page, served from the dns-specialized relay itself, that contains ...