4 ms·
A fully decentralized alternative to DNSSEC that isn't Namecoin. Specifically: - Use EdDSA (i.e. Ed25519) for digital signatures - Use BLAKE2b as the h
by sarciszewski 11y ago
A fully decentralized alternative to DNSSEC that isn't Namecoin. Specifically:
- Use EdDSA (i.e. Ed25519) for digital signatures
- Use BLAKE2b as the hash function
- Keep record sizes small
- Recursive resolvers should use DNSCurve with pinned public keys
We would not only need a solid implementation, but a formal RFC for the IETF to consider/approve.
The idea here is to make it so that no government can influence or control domain name <-> IP address allocations.