DNS has gone down the toilet.
China may lead DNS Seizing Body
https://soylentnews.org/article.pl?sid=19/12/02/1023208
.org sold to for profit
https://soylentnews.org/article.pl?sid=19/11/15/0041251
Patent insanity
https://soylentnews.org/article.pl?sid=15/03/05/0932248
Price cap removed
https://soylentnews.org/article.pl?sid=19/07/02/0011217
MicroSoft seizes domain names
https://soylentnews.org/article.pl?sid=14/07/01/1353230
US Seizes Chinese domains (presumably that were in compliance with Chinese law, though I don't know the details)
https://soylentnews.org/article.pl?sid=14/03/11/1129256
etc.
I want to start a new alternative for DNS. DRS, Distributed Record System. The intent of DRS is to eliminate or mostly eliminate global TLDs. New TLDs, for countries e.g. ~US.*, ~UK.*, ~CN.*. The objective is to isolate batshit to each country. China will not be able to take down your ~US.* domain because you insulted their leader. Nor will the US be able to take down ~CN.* services where that is legal in that country, etc. Should be backwards compatible with DNS, since ~ isn't legal in a DNS name. Your browser can easily tell if you have a DNS host name or DRS host name, just check for ~. So both can be supported at the same time!
In the long term, I'd like each country's government to manage the domains under DRS. But, as long as this is a tiny project, that wont happen. So we'll start with a transitional phase where members of the community from each country manage the TLDs.
Here's what I need. I can do the software, no problem. But I live in the USA, so I can do ~US. But if I managed ~UK, then ~UK would be subject to US law. That isn't the point. So I need volunteers to help run the administration, at least one per country. That way, each country is subject only to its own laws. We'll have one root server that just says where the root server for each country is, and that's it.
There will be no global governance (except for one ~net.* TLD for technical stuff). A technical organization to strongly suggest management practices, and a charter of general principles, but each country should manage itself, as a sovereign, allowing whatever domains are allowed under that country's law. There might also be some sort of crypto set of domains. e.g. ~crypto.* (mirror or DNScoin?) I don't know about that one yet.
Here's what I'm looking for:
Principles:
Administration of a domain may be transferred to a country government upon passage of a law similar in substance to the following:
55 U.S. Code § 1234
The DRS TLD ~US.* is hereby declared as a matter of law to have public key "f4 23 ce 67 94 63 a3 2e 5d 14 54 0b 37 81 1e 07 f2 2a ee 84 23 70 16 b2 58 03 14 56 3a 5a 3c 64" effective March 1st 2022. The following IPv4 addresses are designated as DRS resolver servers: 8.8.8.8, 1.1.1.1. The following IPv6 addresses are designated as DRS resolver servers: ccd6:7fc2:bc45:30e6:2444:6f78:4f97:1d2e
(example IP addresses/public key, please edit)
Legal transfer of registrations under the country TLD to the government shall be facilitated by submission of all registration records to the government in question upon formal request for registrations under the applicable domain.
The DRS Technical Administration shall recognize such law, so long as:
Technical:
I'd like to switch to strong encryption by default, as well. Something similar to DNSCurve+DNSSEC, but mandatory.
Interested? Comments? Suggestions?
Comment below, and also email exaeta (at) protonmail.com if you are serious about helping.
This effort wont start unless I get at least a few other people on board with it.
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @02:12AM (3 children)
UTF8 from TLD on down? I ask because that will absolutely become a headache in many ways. For instance, it's nice that everyone's finally starting to be able to use their own language and character set on the Internet but that also leaves a whole lot of folks around the world unable to manually type in any address on that entire TLD. US ASCII has been called a lot of nasty things in the past but it also had everyone able to get around the web without too many headaches back in the day.
My rights don't end where your fear begins.
(Score: 2, Interesting) by exaeta on Tuesday December 03 2019, @02:47AM (2 children)
The Government is a Bird
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @03:05AM (1 child)
The ~TLD itself is what I was talking about but it could be done exactly the same, so that doesn't matter. See, the thing is, everyone did manage to type ASCII for a long time though. I wouldn't advocate it as the one true charset because it's US derived but I would because it has a very small number of glyphs to differentiate at a glance between compared to, say, Japanese Kanji.
My rights don't end where your fear begins.
(Score: 2, Offtopic) by exaeta on Tuesday December 03 2019, @03:07AM
The Government is a Bird
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @02:39AM
It also occurs to me that writing the addresses of the DRS servers into law could cause issues if a method for changing them faster than your national lawmaking body generally moves isn't allowed for. Like, say, legally designating the Library of Congress to be the authority on such for the US.
My rights don't end where your fear begins.
(Score: 2, Insightful) by aristarchus on Tuesday December 03 2019, @03:01AM (21 children)
Marx predicted that after the achievement of Socialism (I know, Buzztard, but bear with me), the State would no longer be needed and so would "wither away". All good libertariantards have to be in favor of that. So, the point is, and what is wrong with exaeta's insane ramblings here, is the nation-states are no basis for a system of network addresses! If they try to
, the internet will route around them, because it interprets censorship as damage to the network. Nation states can try to enforce their law on the internet, but they will fail. Even Australia, with its compliant population of ex-convict descendants, will fail to control globalization brought about by the collective technological capital of humanity.
Your grasp of international law is just amazing, as usual, exaeta! Just like your grasp of USian domestic law! Amazingly deficient! Ha! Ha, ha! You need volunteers! Ha, ha, more ha's!!!
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @03:13AM (20 children)
One hell of a swing and a miss on that one for ole Karl, eh?
It doesn't matter what level you try and censor at, it's going to get routed around. Makes your globalist control cheerleading look like the partisan tripe it is though since all that does is give oppressive, totalitarian nations control as well.
My rights don't end where your fear begins.
(Score: 2, Redundant) by aristarchus on Tuesday December 03 2019, @05:37AM (4 children)
So you agree, oh MisEducated Buzzard, that Nation-states are obsolete and no basis for a network routing protocol? The treaty of Westphalia granted ever sovereign the right to determine the religion of his subjects, but now the global network rescinds that authority. The age of the nation-state is over.
(I you want firm evidence, just look at who the presidents of the Phillipines, Brazil, Hungary, Turkey, North Korea, and the United States are. No nation can survive such incompetence. Franco pulled it off for a while, but he's still dead, and no nation, not even China, can resist the power of this fully functional . . . router.)
(Score: 1, Touché) by Anonymous Coward on Tuesday December 03 2019, @01:32PM (2 children)
And the first step towards replacing a resurgent economic nationalism with internationalism is to nationalise industry? [reuters.com]
(Score: 0) by Anonymous Coward on Thursday December 05 2019, @04:32AM (1 child)
The nation-state system is not a good fit for a world with globally integrated production and an international working class.
(Score: 0) by Anonymous Coward on Thursday December 05 2019, @04:41AM
Are you kidding? Nations are great. Your nation is how you know your place in the global economy.
American: law maker
Canadian: actor waiter
Indian: app coder
Chinese: factory worker
Mexican: lawn mower
See?
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @05:46PM
Not what I said. I said it doesn't really matter how you organize it because any fuckery will be routed around.
My rights don't end where your fear begins.
(Score: 1) by fustakrakich on Tuesday December 03 2019, @06:35AM (14 children)
It doesn't matter what level you try and censor at, it's going to get routed around.
Yeah, until it smacks head on into your ISP. You still gotta route around that.
La politica e i criminali sono la stessa cosa..
(Score: 1, Troll) by aristarchus on Tuesday December 03 2019, @06:42AM
Wot? You cannot? No wonder you are such and angry and frustrated Soylentil!
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @05:47PM (12 children)
VPN. ToR. SSH tunnel. Some combination of the previous. Whatever comes next. Problem solved.
My rights don't end where your fear begins.
(Score: 1) by fustakrakich on Tuesday December 03 2019, @06:05PM (10 children)
TOR? Please... VPN? HA! Here the velvet glove remains on the iron fist, but all those are already blocked in some locations.
You're only good until you bump into deep packet inspection. And the ISP can trivially block all "unauthorized" encrypted packets. Everything will have to pass through a whitelist supplied by the state. You are completely at their mercy.
La politica e i criminali sono la stessa cosa..
(Score: 2) by The Mighty Buzzard on Tuesday December 03 2019, @07:43PM (9 children)
You didn't spend your formative years performing unsolicited security audits like I did, I take it. There is not now and will never be security that cannot be slipped through with stealth and guile.
My rights don't end where your fear begins.
(Score: 1) by fustakrakich on Tuesday December 03 2019, @09:01PM (8 children)
Well, sure, when you have unlimited funds you can do anything. How do the plebes find secure and reliable service?
La politica e i criminali sono la stessa cosa..
(Score: 0) by Anonymous Coward on Wednesday December 04 2019, @03:38AM (4 children)
Hacking tools are free and open source. The plebes don't care about secure service.
(Score: 1) by fustakrakich on Wednesday December 04 2019, @07:26AM (3 children)
No, I don't believe free and open source will reconnect a cut cable or a jammed signal.
The plebes don't care about secure service.
Not while they have it they don't
La politica e i criminali sono la stessa cosa..
(Score: 2) by aristarchus on Wednesday December 04 2019, @07:54AM (2 children)
"Was it the exact same cat?"
"Dejavu means they've changed something in the Matrix."
"Oh, No! They cut the hardline!!"
"It's the question, fistulacrabish, it's the question that drives us, keeps us up at night. What is the 'matrix'?"
(Score: 1) by fustakrakich on Wednesday December 04 2019, @06:42PM (1 child)
Can you connect to the matrix without an ISP?
And one or two tokes will help you sleep better
La politica e i criminali sono la stessa cosa..
(Score: 0) by Anonymous Coward on Thursday December 05 2019, @03:55AM
Yep. It'll be called Skynet or Starlink or whatevrr.
Viva Musk!
(Score: 3, Insightful) by The Mighty Buzzard on Wednesday December 04 2019, @06:17PM (2 children)
Funds schmunds. All you need is a smart, bored teenager and a laptop to break the security. Once that happens it's just a matter of spending a little time and everyone can now break the security with one click.
My rights don't end where your fear begins.
(Score: 1) by fustakrakich on Wednesday December 04 2019, @06:46PM (1 child)
Breaking the security will splice the cut wire?
La politica e i criminali sono la stessa cosa..
(Score: 2) by The Mighty Buzzard on Friday December 06 2019, @05:30PM
Unless they secure the break, sure. How censorship is routed around is irrelevant.
My rights don't end where your fear begins.
(Score: 0) by Anonymous Coward on Wednesday December 04 2019, @03:36AM
DNS tunnel. If the ISP provides a DNS server, and you can resolve a domain you control, you can transport arbitrary data. A lot of DNS servers give answers containing raw binary data as fast as you can send queries.
DRS tunnel, if any ISP ever supports DRS.
(Score: 1, Disagree) by Anonymous Coward on Tuesday December 03 2019, @03:18AM (18 children)
I already have DNS, and DNS gets me free porn and pirated movies. How does DRS do any better to get me free porn and pirated movies? Why should I switch to DRS which is incompatible with DNS?
You mention DNSCurve so you should be familiar with IM2000, an attempt by DJB to make an alternative to email which is incompatible with SMTP email.
Why didn't IM2000 replace SMTP? Email spam was and still is a problem which IM2000 allegedly would have solved. What happened to IM2000? At the time, Microsoft with Hotmail was the giant email behemoth, and it seemed like replacing SMTP would take the backing of a behemoth to gain acceptance. Microsoft didn't back IM2000. Google launched Gmail. Google didn't back IM2000. Everybody flocked to Gmail until it was a bigger behemoth than Hotmail had ever been. Gmail became synonymous with email to such a degree that Google could unilaterally dictate email standards. Google still didn't back IM2000. Google and Microsoft and Yahoo too standardized DMARC and SPF and DKIM, all email authentication methods based on DNS. The behemoths didn't replace SMTP at all. They extended SMTP with DNS. The behemoths didn't replace DNS either. They used existing SMTP and DNS standards in a compatible way.
You should also be familiar with IPv6. DJB has some choice words to say about IPv6, ironically enough.
Because IPv6 is an alternative to IPv4, even everybody's second-favorite web search engine DuckDuckGo doesn't have an IPv6 address. Nobody cares DuckDuckGo isn't on IPv6, because DuckDuckGo is on IPv4 and everybody has IPv4.
Because DRS isn't compatible with DNS, DRS is doomed to failure.
Good luck with that.
(Score: 1, Redundant) by exaeta on Tuesday December 03 2019, @02:24PM (6 children)
The Government is a Bird
(Score: 0, Interesting) by Anonymous Coward on Wednesday December 04 2019, @02:17AM (5 children)
No. Compatible means you plan to implement DRS on top of existing DNS infrastructure with your extra nationalist country code top level domains registered as punycode names to encode your magic tilde. Anything else means you're planning an incompatible alternative to DNS because what you're doing doesn't follow standards.
The obvious question is why should anyone ever switch to your incompatible DRS when DNS exists? Say for argument that I own pornhub.com. What possible motivation would I have to register ~us.pornhub ever? Everyone in the world can reach pornhub.com already. Even worse, pornhub.com serves a global audience. Why would I want ~us stuck to my brand name for no good reason? What is the motivation to switch?
If porn sites don't switch to DRS, your project is fucked. The world wide web was disseminated worldwide because of porn. The first images ever embedded in a web page were photos of women. Porn drives technology adoption. BitTorrent became popular by offering free porn, and BitTorrent is much less disruptive than what you are attempting.
You can go ahead with your incompatible DRS, but you will fail. You have a better chance of success if you simply create your own alternative DNS root and somehow convince nationalists in every country to adopt your top level domains. If you can do that much, your project may be included in a list of other alternative DNS roots that nobody uses. But if you try to replace DNS, then you will fail because you don't offer any compelling reason to convince anyone to switch to DRS.
Have fun with your darker than dark web which nobody will use.
(Score: 1, Troll) by exaeta on Wednesday December 04 2019, @10:27PM (4 children)
Well. Think another way, why would I not want to register ~us.com.foobar? It's not like having one means giving up the other. What's a couple of dollars to a large corporation?
Plus what if DRS is *cheaper* and *more secure*? The main reason people will switch is that their domain, fully legal in the UK, was taken down by China for comparing their dictator to something. I don't trust DNS and I know od multiple malicious domain takedowns already.
The Government is a Bird
(Score: 0) by Anonymous Coward on Thursday December 05 2019, @03:08AM (3 children)
Why is every large corporate web site not also an .onion site on Tor? What if DRS is just another dark web for batshit nationalist wingnuts?
Why not use national ccTLDs which already exist?
Wow! Is that why shady sites which host pirated content or which link to pirated content are almost always registered in ccTLDs of countries with lax copyright enforcement policies?
Did you do any research before dreaming up DRS?
(Score: 1, Flamebait) by exaeta on Thursday December 05 2019, @10:53PM (2 children)
The Government is a Bird
(Score: 1, Funny) by Anonymous Coward on Friday December 06 2019, @01:44AM (1 child)
What! Mr Robot can set up onion sites in minutes from prison. If you don't even have the skills of a TV script kiddie whose sister does all his hacking for him, you don't inspire confidence in your ability to pull a worldwide DNS replacement out of your ass.
Wow! There are like 13 .onion sites with HTTPS. Somebody's doing something right.
(Score: 2) by exaeta on Saturday December 07 2019, @08:07PM
The Government is a Bird
(Score: 0) by Anonymous Coward on Tuesday December 03 2019, @04:01PM (10 children)
Also remember in the early 90s, government telcos and the ITU were pushing yet another email system, x.400, which didn't go anywhere in the face of smtp. Email addresses there looked like an ldap search string.
(Score: 3, Insightful) by The Mighty Buzzard on Tuesday December 03 2019, @05:50PM (9 children)
Not enough fucks were given. Many fucks are necessary to overcome the inertia of a universally used protocol, as they have very little mass individually.
My rights don't end where your fear begins.
(Score: 1, Informative) by Anonymous Coward on Wednesday December 04 2019, @02:34AM (8 children)
IM2000 had no chance to replace SMTP. IM2000 had no chance to solve spam, which was its major selling point. Sure it seemed like forcing the sender to store messages, instead of transmitting messages to the receiver, would tip the balance toward increasing costs for spammers. Except it wouldn't. Receivers still need to be notified to retrieve messages from senders. Spammers would simply store one copy of each message and then send out spam notifications containing links. Exactly like text messaging spam works today.
IM2000 notification spam would still be spam.
(Score: 0) by Anonymous Coward on Wednesday December 04 2019, @08:49AM (2 children)
You are missing the two points of the anti-spam feature. Rather than zombies that fire and forget or temporary VPSes, by making the recipient come to you, you are requiring the sender stay online and reachable. If a spammer is taken down or blocked before the recipient checks that message, then the spam messages disappear into the æther because it is now impossible to get them. The equivalent of a MUA would just discard bad notifications or show an error that people would delete and move on. It would also reduce the load on the ISPs and providers because they wouldn't have to store or transmit as many unwanted or filtered messages.
It is also a privacy nightmare. Want to know what addresses read your constant contact or mail chimp spam, just wait for the download request to come to you. You'll have the exact information of who you are reaching and when they got the message.
(Score: 0) by Anonymous Coward on Thursday December 05 2019, @02:39AM (1 child)
We live in a sender-store world today where everyone carries a smartphone with a texting app and a web browser app. Everyone receives text message spam containing links to scams. The text message is the notification. The link to web hosting is one tap away from the actual message, stored by the sender.
Our modern smartphone-powered system of sender-store web hosting and notification by text message link is exactly like IM2000. And still there is spam. Lots and lots of spam.
(Score: 1, Informative) by Anonymous Coward on Thursday December 05 2019, @05:06AM
That is different in two regards: the sender server and the message server are different in that setup from the email replacement; and the UA considers the "notification" message to be a stand-alone message, instead of an actual notification of a different message.
To address the latter first, because the UA understands it as a stand-alone message, it presents it to you as such. The actual message content isn't really a concern for the UA. More equivalent to how is how IMAP or MMS are handled, especially when the platform the UA ran on was more resource constrained. IMAP would download the headers and MMS would download the control message. This would cause a notification to show that. However, the actual message wasn't downloaded until opened by user on the UA, with the process mostly transparent to the user. In fact, if you use IMAP on Android or iOS and open a folder you haven't opened in awhile (i.e. with the actual messages discarded), you can see the two-step process as it downloads the metadata and then does the messages one-by-one, as it defaults to downloading on receive. What you don't get is one message to open a link and then another, second message, upon opening it.
Secondly, the messages you are talking about aren't sender-stored either (neither is IMAP or MMS, FWIW). The "notification" definitely isn't, as it sits on the the ISPs server until accessed. And the "payload" isn't either because it is independent of the underlying message. Spammer's sending server gets taken down or changes at will, and their message one could still be up (as they are harder to catch and take down and usually on a different hosting company) or the message one is down but still included in messages because they didn't notice. Or, your security software could have blocked one, but no the other. In a real sender-store protocol, if the sender gets taken offline before you can access their message, there is no message to access and they can't reuse the same message server for a different sending one. Because the servers are required to be the same, you can't have one without the other. In addition the filtering techniques are different because you are not reliant on two separate protocols, programs, or blacklists for filtering. Hence why they adopted using links to begin with: easier to get past security, harder to take down, and those who actually get your payload are more likely to be a babe in the woods.
(Score: 2) by The Mighty Buzzard on Wednesday December 04 2019, @06:20PM (4 children)
I like my explanation better. It's just as true and gave me the opportunity to say "fuck" several times not entirely gratuitously.
My rights don't end where your fear begins.
(Score: 0) by Anonymous Coward on Thursday December 05 2019, @02:47AM (3 children)
(Score: 2) by The Mighty Buzzard on Friday December 06 2019, @05:32PM (1 child)
That's only true for people with no appreciation for what makes life enjoyable. I happen to dig both the wit of others and bagpipes.
My rights don't end where your fear begins.
(Score: 3, Funny) by aristarchus on Friday December 06 2019, @10:50PM
Is "Enter the Haggis" still playing?
(Score: 2) by hendrikboom on Wednesday May 13 2020, @11:38AM
That's only true for bad bagpipes players.
(Score: 3, Interesting) by Bot on Tuesday December 03 2019, @09:08PM (3 children)
that some of your goals coincide with the goals of gnunet name service.
I also predict that the servers will be subject to DDoS. An architecture similar to the classic DNS requires a tie to an IP, and your project is against the interest of all political entities on earth. You will be DDoSed.
I also know that gnunet has some drawbacks in the assignment of names compared to classic DNS.
OTOH gnunet or other overlays could render root servers more difficult to attack, or be the infrastructure so that any cloud VPS can easily be turned into a server, or let the browser itself with a JS engine function as a personal server.
Lastly how about a big git repo with zones to selectively feed to a powerdns db or... /etc/hosts :) Anybody contributes with signed messages.
Account abandoned.
(Score: 3, Interesting) by Bot on Tuesday December 03 2019, @09:17PM (2 children)
uh and have you checked out https://www.namecoin.org/ [namecoin.org] ?
Account abandoned.
(Score: 0) by Anonymous Coward on Wednesday December 04 2019, @04:27AM (1 child)
https://www.opennic.org/ [opennic.org]
(Score: 1, Interesting) by Anonymous Coward on Wednesday December 04 2019, @05:04AM
All those alternate roots suffer the same choices under Zooko's triangle. Most choose to give on the decentralized aspect; Namecoin gives a little on secure and a little on decentralized; .onion mostly gives on the human-readable and a touch on secure.
(Score: 0) by Anonymous Coward on Wednesday December 04 2019, @01:50PM
Is it up yet?
(Score: 1, Funny) by Anonymous Coward on Thursday December 05 2019, @02:28PM
With blackjack! and hookers!
(Score: 0, Informative) by Anonymous Coward on Friday December 06 2019, @01:49AM (7 children)
Can I haz ~di.cks?
(Score: -1, Spam) by Anonymous Coward on Friday December 06 2019, @02:05AM (6 children)
~co.cks
(Score: 0, Informative) by Anonymous Coward on Friday December 06 2019, @02:11AM (5 children)
~pr.icks
(Score: -1, Spam) by Anonymous Coward on Friday December 06 2019, @10:51PM (4 children)
~ex.aeta
(Score: 0, Informative) by Anonymous Coward on Sunday December 08 2019, @09:43AM (2 children)
~sp.am
(Wow! Five spam mods in a row? What are the odds they are from the same humor-challenged Soylentil? But look at the bright side, he's probably empty now, so he can be mod-bombed at will with no ability to reciprocate, even if he could guess where it was coming from.)
(Score: 0, Informative) by Anonymous Coward on Monday December 09 2019, @03:12AM (1 child)
No, they weren't all from the same AC. Some trigger happy spam modding asshole moderator just banned a few IPs and made new enemies of SN.
(Score: 0) by Anonymous Coward on Wednesday December 11 2019, @07:03AM
I suspect it is the super-touchy exaeta, idiot and clam-monger that he is. I will now hunt him down, and spam mod his ass into an entirely different fora. He loses at law (no suprise), he loses at networking (less of a surprise), and he is unlucky in love, and cards. Total looser! Exaeta is exactly the type of person who is unsuited to be a Soylentil. We need him to post more, so we can mock him more! Post on, Exaeta! Do you have a great idea for the Moderation System here on SoylentNews? We are all dicks, and penises, and phallii.
(Score: 0) by Anonymous Coward on Tuesday December 10 2019, @01:15AM
~ga.yniggers from the Gabonese Republic
(Score: 0, Touché) by Anonymous Coward on Monday December 09 2019, @03:22AM
Found any fucking stupid college students yet to code for you? Are you going to press gang them into volunteering to do your work for free with the false promise of paid work someday after they gain lucrative experience points in the fraudulent tech industry?
Code open source for free and the jobs will come: the biggest lie in tech.
Don't forget to post a comment here when you abandon your project because you finally admit it's fucking stupid.
(Score: 2) by aristarchus on Wednesday December 11 2019, @07:13AM
One TLD, ork!!
I have seen how this all plays out before, somewhere. Needs more Wizard.