Startup idea: .nonpublic trusted TLS (opens in new tab)

(3dbrows.dev)

4 points3dbrows3y ago4 comments

4 comments

A registrar only controls NS records (and glue A/AAAA) required for delegation. It seems impossible to enforce the no address record policy.

3dbrowsOP3y ago

Right, so it would be necessary to force the NS records to point to registrar-owned nameservers which would be the point of enforcement. This is of course bad for a variety of reasons, not least how convention-violating it is.

icedchai3y ago

Personally, I wouldn't want to do that. If I register a domain, I should be able to point it anywhere you want.

Plus, you'll need cooperation from all the registrars out there that are selling domains in your .nonpublic TLD. Unless you're the only one.

1 more reply

j / k navigate · click thread line to collapse

4 comments

icedchai3y ago

A registrar only controls NS records (and glue A/AAAA) required for delegation. It seems impossible to enforce the no address record policy.

3dbrowsOP3y ago

icedchai3y ago

Personally, I wouldn't want to do that. If I register a domain, I should be able to point it anywhere you want.

Plus, you'll need cooperation from all the registrars out there that are selling domains in your .nonpublic TLD. Unless you're the only one.

1 more reply

j / k navigate · click thread line to collapse