logoalt Hacker News

josephgtoday at 1:22 AM3 repliesview on HN

I wonder if it would be a good idea to remake DNS on top of bluesky. The basic idea is that, if you own a domain name, you post DNS updates in a bluesky feed. The firehose itself is authoritative. DNS servers sit downstream of the firehose. All the updates to domain names get written into a database, and they essentially just respond to queries hitting that database. This would let anyone (with enough bandwidth) run a fast domain name server.

We could use this to fix some of DNS's long running problems. Like, we could add upstream cryptographic signatures to DNS records. And put TLS certificates in there too. We might be able to ditch TTL entries. In a DNS server, records should update via server-push from the firehose. You shouldn't have to wait for TTL to expire.

I think it'd make a nice little system.


Replies

arjviktoday at 1:56 AM

I think you just invented blockchain DNS (e.g. https://handshake.org/) without the byzantine tolerance.

show 1 reply
inigyoutoday at 8:40 AM

How do you prove you own a domain with no records?

show 2 replies
ruinedtoday at 4:56 AM

this is not quite what you are asking for but https://marque.at exists

show 1 reply