Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

.name Termination

neil.fraser.name

Post reply on HN
Print view View original

251–260 of 559 posts

Re: .name Termination

#251

Post by xur17 »

aliasxneo wrote: post #218
xur17 wrote: post #191

Earlier quoted context omitted.

Do you have a brief explanation of what DNTLS is that you could post here?

Sure, happy to put something here as a comment. Alice registers `alice.dntls` and Bob registers `bob.dntls` on the DNTLS network. During the registration process, they generate PQ key pairs that are registered along with the name. Alice's and Bob's name are hashed before being stored on the network. Bob knows Alice's name, so he can perform the necessary hash computation to look up Alice's public key material on the…

Does alice "own" alice.dntls after she registers it? If so, how do you prevent name squating?

Re: .name Termination

#253

Post by mzajc »

aff-vasileva wrote: post #246

Turns out “buying your name on the internet” was technically just renting a room in someone else’s last name.

In this case the registry itself (Verisign) was the owner of the second-level domain, and they most certainly shouldn't be allowed to just drop your registration whenever they please.

Re: .name Termination

#254

Post by zahllos »

akersten wrote: post #25

It kind of seems like an insane TLD structure to begin with, right? I always thought .co.uk was bad (you're just pinning yourself to whoever owns the .co. part, but at least browsers have some suffix list where you can't, I don't know, hijack some login cookie for all of .co.). Joe Smith and John Smith can independently register joe.smith.name and john.smith.name, do browsers have a wildcard suffix list for the 2nd l…

In the UK Nominet (the UK domain namr registrar - nic.uk) only permitted 3rd domains - co.uk. org.uk, me.uk. then there were "prove your status" ones such as ltd.uk, plc.uk and ac.uk plus ones like gov.uk, mod.uk, sch.uk, nhs.uk etc.

.uk was opened up relatively recently.

Re: .name Termination

#255

Post by avarun »

Pxtl wrote: post #211
kennywinker wrote: post #150

Earlier quoted context omitted.

Not to mention some of those kids may end up changing their names at some point if they get married and decide to take their partner’s last name.

Aside: I'm honestly bewildered that Google doesn't have the ability to handle that in gmail accounts. If somebody gets married or otherwise needs to change their name, their answer is "just make a new google account" when all your stuff is still tied to the old account.

They rolled this out in March this year in the US (and December last year in India).

I've successfully renamed an old account with an email address I no longer liked. It works quite well on everything 1st party, but does have the potential of causing issues with OAuth on poorly-coded websites that key on email instead of user ID (ie. most of them). You do get to keep your old email address though, so it still ends up working fine in practice.

Re: .name Termination

#256

Post by patcon »

arjie wrote: post #50

We were rescued from that dot org scam by the fact that ICANN is a California non profit. I wonder if the AG can lean on them again. This is an outrageous thing to do.

This is the comment I was looking for. Thank you

Re: .name Termination

#257

Post by aliasxneo »

xur17 wrote: post #251
aliasxneo wrote: post #218

Earlier quoted context omitted.

Sure, happy to put something here as a comment. Alice registers `alice.dntls` and Bob registers `bob.dntls` on the DNTLS network. During the registration process, they generate PQ key pairs that are registered along with the name. Alice's and Bob's name are hashed before being stored on the network. Bob knows Alice's name, so he can perform the necessary hash computation to look up Alice's public key material on the…

Does alice "own" alice.dntls after she registers it? If so, how do you prevent name squating?

Names are not able to be traded, so it's first come first serve. It's impossible to completely defeat name squatting, but you can make it less enticing. In the above case, Alice can "sell" her name to Bob on some aftermarket but the only way to do so is by transferring the cryptographic material. This is fraught with issues, especially considering once Bob has the keys he has no obligation to pay.

Names are valid for one year and range from $10/yr up like current domain names. Letting a name expire opens it back up to being registered again.

We have quite a few other "tools" in play behind the scenes that make name trading/squatting extremely impractical, but I won't go into those details here :)

Re: .name Termination

#258

Post by megagpt1 »

davkan wrote: post #248
ketzu wrote: post #234

Earlier quoted context omitted.

Github Pages is probably the most well known one (on here). I think geocities had this as well? A lot of hosting services offer this in general. (eg render) Tumblr? (Might not count as the control over the page is more limited. The subdomains "are" still tumblr.) For reddits subdomains are redirects to subreddits of the same name, so I guess that doesn't count.

None of these examples are of actual separate registration/ownership of a 3LD from the parent 2LD. Cloudflare owns the domain for myproject.pages.dev and hosts all the relevant infra. Not to say that there isn't a different entity represented by the 3LD than the 2LD but it's not exactly the same. Also I would not consider the examples of tumblr and reddit to be relevant. A person's blog on myprofile.tumblr.org is sti…

You can buy example.it.com on many registrars. Someone bought it.com and operates it like a TLD.

Re: .name Termination

#259

Post by amiga386 »

dpoloncsak wrote: post #193
xp84 wrote: post #188

Earlier quoted context omitted.

Even that doesn't pass basic scrutiny. The same ambiguity can and always will exist with tim-apple.com and tim.apple.com - there's nothing here that needs fixing.

I can say, as a SysAdmin, I have been taught and tell my users to check the domain to verify a website is real. It's a strange edgecase that the owner of John.Doe.com does not need to own Doe.com In every other case that I know about, to own the Joe subdomain of Doe.com, you would need to own Doe.com edit: I guess I've gotten so used to the government 3LDs I just don't even see them anymore, or just see something lik…

Hello sysadmin. Good luck navigating the internet.

What you should know, and what your browser does know and automatically applies cookie policy and colouring your URL bar, is the Public Suffix List: https://en.wikipedia.org/wiki/Public_Suffix_List

It will let you know that, for example, one does not need to own .co.uk to own the subdomain foo.co.uk.

Re: .name Termination

#260

Post by ketzu »

davkan wrote: post #248
ketzu wrote: post #234

Earlier quoted context omitted.

Github Pages is probably the most well known one (on here). I think geocities had this as well? A lot of hosting services offer this in general. (eg render) Tumblr? (Might not count as the control over the page is more limited. The subdomains "are" still tumblr.) For reddits subdomains are redirects to subreddits of the same name, so I guess that doesn't count.

None of these examples are of actual separate registration/ownership of a 3LD from the parent 2LD. Cloudflare owns the domain for myproject.pages.dev and hosts all the relevant infra. Not to say that there isn't a different entity represented by the 3LD than the 2LD but it's not exactly the same. Also I would not consider the examples of tumblr and reddit to be relevant. A person's blog on myprofile.tumblr.org is sti…

I see, that's a valid way to think of domain ownership.

When I read > I have been taught and tell my users to check the domain to verify a website is real.

I was thinking more of control of the content as "ownership" of the domain.

Post reply on HN