4 ms·

This is an honest question because I really don’t get it: what problem does this solve, especially with regard to “distributed domains”?

by hrbf 4y ago

jesprenj 4y ago
DANE is a really big deal. It removes the dependency on TLS certificate authorities so self signed certificates can be used and verified via records, published in DNS and signed with DNSSEC. Though I have greater concerns regarding privacy of the new browser. Is it like ungoogled-chromium? DANE should really be merged into upstream chromium.
- hrbf 4y ago
  Interesting idea. This can be done with the existing DNS infrastructure I believe. It really sounds like a workable solution.
deleted 4y ago
[deleted]
kelthuzad 4y ago
The first thing I would think of is not having to trust random certificate authorities, which would avoid incidents like this [0]. Another problem with the current state of the web was explained in an article I read a few days ago [1]. [0]: https://slate.com/technology/2016/12/how-the-2011-hack-of-diginotar-changed-the-internets-infrastructure.html https://slate.com/technology/2016/12/how-the-2011-hack-of-di... [1]: https://www.politico.com/news/2022/04/09/website-domain-more-expensive-00023524 https://www.politico.com/news/2022/04/09/website-domain-more...
- hrbf 4y ago
  An interesting thought. This relates to DANE if I understand correctly. This can work on existing infrastructure. But what about this “distributed domains“ thing though? Unless I’m understanding it wrong, there’s blockchain technology involved. Why?
  - kelthuzad 4y ago
    You are repeating the question while both of the given articles explain the current problem of the internet and make the reader understand the why. Another user in this thread with the name 'jillesvangurp' has elaborated on the why, which is worth a read.

4 ms·

This is an honest question because I really don’t get it: what problem does this solve, especially with regard to “distributed domains”?

by hrbf 4y ago

This is an honest question because I really don’t get it: what problem does this solve, especially with regard to “distributed domains”?

jesprenj 4y ago
DANE is a really big deal. It removes the dependency on TLS certificate authorities so self signed certificates can be used and verified via records, published in DNS and signed with DNSSEC. Though I have greater concerns regarding privacy of the new browser. Is it like ungoogled-chromium? DANE should really be merged into upstream chromium.
- hrbf 4y ago
  Interesting idea. This can be done with the existing DNS infrastructure I believe. It really sounds like a workable solution.
deleted 4y ago
[deleted]
kelthuzad 4y ago
The first thing I would think of is not having to trust random certificate authorities, which would avoid incidents like this [0]. Another problem with the current state of the web was explained in an article I read a few days ago [1]. [0]: https://slate.com/technology/2016/12/how-the-2011-hack-of-diginotar-changed-the-internets-infrastructure.html https://slate.com/technology/2016/12/how-the-2011-hack-of-di... [1]: https://www.politico.com/news/2022/04/09/website-domain-more-expensive-00023524 https://www.politico.com/news/2022/04/09/website-domain-more...
- hrbf 4y ago
  An interesting thought. This relates to DANE if I understand correctly. This can work on existing infrastructure. But what about this “distributed domains“ thing though? Unless I’m understanding it wrong, there’s blockchain technology involved. Why?
  - kelthuzad 4y ago
    You are repeating the question while both of the given articles explain the current problem of the internet and make the reader understand the why. Another user in this thread with the name 'jillesvangurp' has elaborated on the why, which is worth a read.