Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-09 Thread Greg
DNSChain 0.0.1 was just released and published to NPM! You can now use NPM to install it on servers. :-) https://npmjs.org/package/dnschain Next up: response signing (and more!). Cheers! Greg -- Please do not email me anything that you are not comfortable also sharing with the NSA.

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Eric Mill
I just want to be clear on my understanding here. This provides a way to register a .dns or .bit domain, and store your registration of that domain in a blockchain. Then, to guarantee authenticity, you can store a fingerprint of an SSL cert in the blockchain, so that anyone can verify that the

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Natanael
1: Domains expire unless renewed. 2: Transfers are possible. 3: The security model of blockchain based systems like Namecoin is that the primary chain had the greatest amount of proof-of-work behind it, and you can't fake the proof-of-work. You can try to isolate a node and provide a fake chain,

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Greg
On Feb 8, 2014, at 3:18 PM, Eric Mill e...@konklone.com wrote: I just want to be clear on my understanding here. This provides a way to register a .dns or .bit domain, and store your registration of that domain in a blockchain. Not quite. 1) *.dns is a meta-TLD. You cannot register

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Greg
Overall I'm **super** excited about Namecoin and DNSChain, and I've been waiting for someone to connect them through traditional DNS. This is such valuable work, thank you for being a pioneer on this. Thanks, btw, for your kind words, they are really appreciated. I get a lot of flack

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Greg
On Feb 8, 2014, at 4:20 PM, Greg g...@kinostudios.com wrote: Some questions, though the first two may just be about Namecoin: I think Eric did a good job of answering your 3 questions here. Sorry Natanael, I mean you did a good job of answering his questions. Brainfart. -g -- Please do not

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Eric Mill
Not quite. 1) *.dns is a meta-TLD. You cannot register meta-TLDs. You own them already. There is therefore no need to register them. There might exist other terms for this concept, but I wasn't aware of them. Okay, the explanation you updated helps:

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Greg
On Feb 8, 2014, at 5:52 PM, Eric Mill e...@konklone.com wrote: This isn't what I mean - what if someone is MITMing all your connections to the blockchain, so you're being presented with all fake chains, and never have a chance to see the real one? In other words, how is the connection to

Re: [cryptography] First public DNSChain server went online yesterday!

2014-02-08 Thread Greg
One more thought: Let's take the case where you already have a portion of the blockchain downloaded. Let's say that at time A you had a complete copy of it. At time B A, the NSA decides to not like you and encloses your DNSChain server in a Matrix (I bet they'll even use that term). Bitcoin