okTurtles/dnschain on Hacker News

I mean, I was being a bit facetious, but there are actual proposals for blockchain backed DNS. [1] https://github.com/okTurtles/dnschain

comment by achr2 · 2016-11-17 · in The .blog Bait and Switch

▲ 92

DNSChain – A blockchain-based DNS and HTTP server

story by callaars · 2016-10-22 · 15 comments

▲ 11

DNSChain: secure decentralized alternative compatible with traditional DNS

story by muraiki · 2016-08-30 · 0 comments

…definitely answers my question. Thank you. What about something like certificate blockchain? e.g. https://github.com/okTurtles/dnschain

comment by arpa · 2016-01-22 · in Microsoft silently adds Amazon root certificates to its CTL

…IdP via block chains, 3) a browser plugin, 4) a whole lot more (see the Github linked below. https://github.com/okTurtles/dnschain/blob/master/README.md

comment by iheartmemcache · 2016-01-12 · in Shutting down persona.org in November 2016

…security to make up for it. Just to name a few-- https://cryptosphere.io/ uses libsodium, https://github.com/okTurtles/dnschain is based on GPG and standard PKI, https://wiki.enigmabox.net/ (I've only audited the cjdns server but it looks…

comment by iheartmemcache · 2016-01-09 · in Show HN: A decentralized social network with end-to-end encryption

…any knowledge of the existing solutions is itself part of the problem. Let's start with this: https://github.com/okTurtles/dnschain

comment by idibidiart · 2015-12-06 · in Distrust Let's Encrypt Subordinate Certificate

…any knowledge of the existing solutions is itself part of the problem. Let's start with this: https://github.com/okTurtles/dnschain

comment by idibidiart · 2015-12-06 · in Distrust Let's Encrypt Subordinate Certificate

…any knowledge of the existing solutions is itself part of the problem. Let's start with this: https://github.com/okTurtles/dnschain

comment by idibidiart · 2015-12-06 · in Distrust Let's Encrypt Subordinate Certificate

> Convergence was the perfect replacement, but it never gained any traction. It's really not. https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-10-29 · in Sustaining Digital Certificate Security

Probably something like this: https://github.com/okTurtles/dnschain

comment by higherpurpose · 2015-04-02 · in Google pulling China CNNIC CA from its products

…MITM attacks, it's one of the only options available to you (probably the only realistic option): https://github.com/okTurtles/dnschain/blob/master/docs/Compa... > However, we can reduce the scope of the problem, and just focus on forcing…

comment by itistoday2 · 2015-03-24 · in Maintaining Digital Certificate Security

…and related projects by writing about them, podcasting, tweeting, blogging, contributing code, etc. https://github.com/okTurtles/dnschain#community This certainly requires community support.

comment by itistoday2 · 2015-03-24 · in Google warns of unauthorized TLS certificates trusted by almost all OSes

…would be exactly where they are right now: knowing who issued cert, and that's it. Short form: https://github.com/okTurtles/dnschain/blob/master/docs/Compa... Long form: https://blog.okturtles.com/2014/09/the-trouble-with-certific...…

comment by itistoday2 · 2015-03-24 · in Google warns of unauthorized TLS certificates trusted by almost all OSes

…talking about with ratcheting keys). We maintain a comparison of various approaches here: [1] https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-03-24 · in Maintaining Digital Certificate Security

…(if Google stored their domain info in a blockchain). We compare various mechanisms here: https://github.com/okTurtles/dnschain/blob/master/docs/Compa... EDIT: Not sure why this comment is getting downvoted. Maybe some folks don't want…

comment by itistoday2 · 2015-03-24 · in Maintaining Digital Certificate Security

…in a blockchain. We're maintaining a list of alternatives and how they compare to DNSChain here: https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-03-24 · in Maintaining Digital Certificate Security

…who issued the cert. Details: https://blog.okturtles.com/2014/09/the-trouble-with-certific... TLDR: https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-03-24 · in Maintaining Digital Certificate Security

…I'm working on with some other folks called DNSChain to other approaches people have suggested: https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-03-21 · in How I got a valid SSL certificate for my ISP's main domain

…ca cert? That sounds like it would have similar/identical properties to HPKP, which we cover here: https://github.com/okTurtles/dnschain/blob/master/docs/Compa... > How can/why should I trust a dnschain server to validate google.com?…

comment by itistoday2 · 2015-03-08 · in DNSChain 0.5 released, brings full HTTPS support, Openname Resolver API and more

…DNSChain also lets you communicate with blockchains over a MITM-proof HTTPS connection: https://github.com/okTurtles/dnschain/blob/master/docs/What-... > not that such metadata isn't rather obvious anyway by observing traffic between ips.…

comment by itistoday2 · 2015-03-07 · in DNSChain 0.5 released, brings full HTTPS support, Openname Resolver API and more

…that is ever required: the pin to DNSChain itself, which is easily verified once only at setup. [1] https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-02-23 · in Government-Linked Certificate Authorities in OS X

…called DNSChain, and we keep a running comparison of it with other proposals folks have made here: https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-02-23 · in Government-Linked Certificate Authorities in OS X

…have made (including Convergence, Perspectives, Certificate Transparency, DNSSEC, TACK, HPKP): https://github.com/okTurtles/dnschain/blob/master/docs/Compa...

comment by itistoday2 · 2015-02-23 · in Government-Linked Certificate Authorities in OS X

…which is why we are making it accessible to such devices over a MITM-proof connection via DNSChain: https://github.com/okTurtles/dnschain

comment by itistoday2 · 2014-11-18 · in Launching in 2015: A Certificate Authority to Encrypt the Entire Web

…The remaining pieces need to be finished and the players need to come together though: https://github.com/okTurtles/dnschain If you're in San Francisco, come to the SF Bitcoin Meetup, I'll be speaking on this topic tonight:…

comment by itistoday2 · 2014-11-18 · in Launching in 2015: A Certificate Authority to Encrypt the Entire Web

So, blockchain solutions do work, and here is how: https://github.com/okTurtles/dnschain You can replace all CAs with a single blockchain. And we should do this, because this Let's Encrypt CA, while a great step forward, is still…

comment by itistoday2 · 2014-11-18 · in Launching in 2015: A Certificate Authority to Encrypt the Entire Web

This maybe: https://github.com/okTurtles/dnschain

comment by higherpurpose · 2014-09-24 · in Libsodium 1.0.0 released

▲ 103

A Blockchain-based DNS and HTTP server

story by timtadh · 2014-08-15 · 25 comments

…[0] bridges DNS resolution and namecoin, so there's no need to modify existing software. [0] https://github.com/okTurtles/dnschain

comment by rakoo · 2014-08-14 · in What's the matter with PGP?

…fraudelent players to stay in the game. Personally, I'd like to see it head in this direction: https://github.com/okTurtles/dnschainhttps://github.com/okTu... also for some more background on some concerns with CAs see:…

comment by jfaucett · 2014-08-06 · in Show HN: Simple SSL Scanner

…node, another nifty features like censorship circumvention and dotDNS metaTLD for JS apps): https://github.com/okTurtles/dnschain (I'm one of the devs of this) BitShares DNS (a different type of blockchain with a different consensus…

comment by itistoday2 · 2014-07-23 · in Open Name System: Extending DNS with the Blockchain

…- as long as you're willing to give up on regular DNS domains and use .dns or .bit domains: https://github.com/okTurtles/dnschain http://www.freespeechme.org/

comment by higherpurpose · 2014-07-19 · in HSTS for new TLDs

You mean like this? https://github.com/okTurtles/dnschain

comment by higherpurpose · 2014-07-08 · in Maintaining digital certificate security

dnschain: https://github.com/okTurtles/dnschain

comment by rakoo · 2014-07-08 · in Maintaining digital certificate security

The blockchain, on the other hand, would: https://github.com/okTurtles/dnschain/blob/master/README.md#...

comment by itistoday2 · 2014-07-02 · in DNSSEC Would Not Help Prevent Microsoft’s Seizure Of Domains

You should create .dns or .bit domains and encourage Iranian users to use DNSchain servers for DNS: https://github.com/okTurtles/dnschain

comment by higherpurpose · 2014-06-27 · in Is TLS Fast Yet?

…deserve a better internet than this. Use the blockchain for free and actually secure certificates: https://github.com/okTurtles/dnschain

comment by itistoday2 · 2014-06-03 · in $1.99 SSL certificates offered by Namecheap

…http://www.aaronsw.com/weblog/squarezooko [4] http://okturtles.com/img/Aaron_Swartz_Email.jpg [5] https://github.com/okTurtles/dnschain

comment by itistoday2 · 2014-05-31 · in Ask HN: How bad is it to use a self-signed SSL certificate?

…otokar.bit [....] ;; ANSWER SECTION: otokar.bit. 527 IN A 109.190.29.155 [...] [0] https://github.com/okTurtles/dnschain

comment by rakoo · 2014-05-31 · in Use other DNS servers than your ISP's

…DNSChain servers, or OpenNIC ones when the former don't work, because of privacy concerns. https://github.com/okTurtles/dnschain http://www.opennicproject.org/

comment by higherpurpose · 2014-05-30 · in No more ads

…ROM" and whatnot, they should be using an OpenNIC DNS or set up their own encrypted DNSChain ( https://github.com/okTurtles/dnschain ).

comment by higherpurpose · 2014-05-08 · in Free Your Android

…I participated in dnschain [0] https://wiki.namecoin.info/index.php?title=Domain_Name_Speci... [1] https://github.com/okTurtles/dnschain

comment by rakoo · 2014-04-26 · in CAcert.org – A community-driven Certificate Authority issuing free certificates

…server, and then be able to visit all of those .bit domains, once you use a DNSChain server's IP. https://github.com/okTurtles/dnschain Then there's the FreeSpeechMe Firefox plugin that when installed also allows you to view .bit domains.…

comment by higherpurpose · 2014-04-10 · in Show HN: A different approach against online censorship

…way a blockchain-based solution does. [1][2] [1] https://news.ycombinator.com/item?id=7325551 [2] https://github.com/okTurtles/dnschain

comment by itistoday2 · 2014-04-09 · in Heartbleed should bleed X.509 to death

FYI, you should take a look at DNSChain: https://github.com/okTurtles/dnschain

comment by higherpurpose · 2014-04-09 · in Heartbleed should bleed X.509 to death

…so you can prevent MiTM), I don't see what's missing technically to have our own internet. [0] https://github.com/okTurtles/dnschain

comment by rakoo · 2014-04-04 · in Can Namecoin obsolete ICANN (and more)?

…your browser ! Come and join us, this is actually the future. Oh and by the way I'm id/rakoo. [0] https://github.com/okTurtles/dnschain

comment by rakoo · 2014-03-31 · in Refusing to verify myself: I am liz on Keybase.io