Comment on Letsencrypt is under US jurisdiction. Is there a free-er alternative?

• libewa@feddit.org ⁨2⁩ ⁨weeks⁩ ago

  ICANN can (theoretically) not force anyone to deregister your domain. If your stack is all outside the US, and everyone collectively decided to disobey the US, the Internet’s decentralization would be true.

  The hard part about building a decentralized network is finding out where to hide the centralization.

  For the Internet, the centralization is hidden in the IP block and DNS Zone delegation. After this is done, that region is decentralized. A/I’s problem was that the registry for .org is a subsidiary of IANA. With EU servers, EU DNS and a EU domain, EU clients cannot be prevented from connecting solely from the outside. The US would need a collaborator.

  original

  • slazer2au@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    That is all well and good, but we have many instances of domains being pulled from people because of court ruling and your register is not going to defy a court ruling for your €17/year domain.

    original
• Pika@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

  Is this accurate? Like, I know what you’re meaning, but I’m pretty sure it’s not ICANN doing it, and more so your domain registrar handing it over to the US government.

  I think the most control that ICANN has over it is they could theoretically, if they wanted to, delete an entire top level domain. Since they do control the DNS root, but that is the most that they control from what I understand.

  I don’t know if they have the ability to delete or transfer control over an individual domain on legal request. I think that’s outside of what their actual system allows for.

  original
• veniasilente@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

  Maybe it should be! We need non-fascis-adjacent DNS roots.

  original

  • frongt@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    opennic.org

    original
  • eleitl@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

    There are authorityless blockchain-backed name registration services. In general, it is important whether you can localize a resource. If you can easily find it, it doesn’t have to human-readable.

    original

    • WhyJiffie@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

      if its not human readable, how will people know its the place they want to go to? I don’t think bookmarked onionsites is a particularly good idea

      original

      • eleitl@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

        In order to find content, we used to have webrings, directory services, and then search engines. Most people don’t enter URLs by hand.

        original
    • veniasilente@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

      The root (haha) of needing better DNSes is because the ones that are are tied to technofascists and their ilk: techbros, nazis, psycopaths. So using something with blockchain sounds quite missing the point.

      original

      • eleitl@lemmy.zip ⁨2⁩ ⁨weeks⁩ ago

        You do understand that a P2P proof of work backed global store is just infrastructure? And as egalitarian as DNS servers? And it doesn’t have the storage/compute footprint of a full bitcoin node.

        The space of human-readable names is quite small, so proof of work is needed to protect it from being flooded. An alternative is to have your servers have names to be or derived from their public keys, or dissolve content from its location. Which brings its own problems.

        original
  • NotEasyBeingGreen@slrpnk.net ⁨2⁩ ⁨weeks⁩ ago

    I worked on the Yeti Project a while ago, which showed that an independent group of operators can run root servers.

    Managing the contents of the root zone was out of scope… we used the ICANN root.

    original
• Auli@lemmy.ca ⁨2⁩ ⁨weeks⁩ ago

  Aren’t the .country domains managed by the countries?

  original

  • slazer2au@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    Who all get that authority from ICAAN

    original

    • Dirk@lemmy.ml ⁨2⁩ ⁨weeks⁩ ago

      No-one did and you can basically establish you fully independent DNS. The DNS unter ICANN control is just the default.

      en.wikipedia.org/wiki/Alternative_DNS_root

      original
• pdl@social.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

  @slazer2au @Sibbo The administration of domain names is not done by ICANN. ICANN is responsible for managing IP addresses, ports, AS numbers. There are local registries for the administration of domain names. My .de domains are administered by DENIC in Germany. .net and .com are administered by US companies. This domains eventually can be shutdown by US authorities.

  original