2 ms·

> It's the golden unsolved, perhaps unsolvable problem in crypto. I think this problem was solved fairly well by Namecoin back in 2011. Software like DNSChain

> It's the golden unsolved, perhaps unsolvable problem in crypto. I think this problem was solved fairly well by Namecoin back in 2011. Software like DNSChain [1] then makes it possible to securely access blockchains like Namecoin without having to run a full node on your phone or other device. If you can't run your own DNSChain server (or don't have a friend's you can use), you can query two or more independent servers and make sure the responses match. Dionysis Zyndros recently came up with a mechanism whereby you can even query a single DNSChain server (that you might not trust), and still be assured of correct replies if you received an accurate key once (we'll be publishing info on this technique soon over at blog.okturtles.com; it's somewhat similar to what you're talking about with ratcheting keys). We maintain a comparison of various approaches here: [1] https://github.com/okTurtles/dnschain/blob/master/docs/Comparison.md https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

zaroth 12y ago
Of course how could I have not mentioned the blockchain? Thank you! Part of the trick with blockchain is validation. Everyone is not going to keep a full node, not even close, and just delegating trust is not the answer. You want to trust but verify. I'm not sure what the state-of-the-art is these days for SPV-type verification, but I don't see anything in the current DNSChains response which would allow any kind of independent verification of the returned data. Edit, also see: https://en.bitcoin.it/wiki/User:Gmaxwell/namecoin_that_sucks_less https://en.bitcoin.it/wiki/User:Gmaxwell/namecoin_that_sucks...
- itistoday2 12y ago
  > Part of the trick with blockchain is validation. Everyone is not going to keep a full node, not even close, and just delegating trust is not the answer. You want to trust but verify. Right, so hence the two techniques I mentioned in my reply: query more than one server, and/or use Dionysis' "proof of transition" (for lack of a better name).

zaroth 12y ago

Of course how could I have not mentioned the blockchain? Thank you! Part of the trick with blockchain is validation. Everyone is not going to keep a full node, not even close, and just delegating trust is not the answer. You want to trust but verify. I'm not sure what the state-of-the-art is these days for SPV-type verification, but I don't see anything in the current DNSChains response which would allow any kind of independent verification of the returned data. Edit, also see: https://en.bitcoin.it/wiki/User:Gmaxwell/namecoin_that_sucks_less https://en.bitcoin.it/wiki/User:Gmaxwell/namecoin_that_sucks...

itistoday2 12y ago
> Part of the trick with blockchain is validation. Everyone is not going to keep a full node, not even close, and just delegating trust is not the answer. You want to trust but verify. Right, so hence the two techniques I mentioned in my reply: query more than one server, and/or use Dionysis' "proof of transition" (for lack of a better name).