Opera to support sites using the .crypto top-level domain
theregister.co.uk
theregister.co.uk
The bigger issue is that a lot of people use .dev for internal/development uses, and it should therefore never been made into a "real" TLD in the first place. It's like deciding to sell "example.com" to someone.
EDIT: so would this mean that registering a .dev for some BigCo domain could potentially cause problems? Curious what the real-world implications might be.
I could've swore .local was okay, as that's what I use. But maybe not. Apparently it can cause issues with Macs, but that's new to me seeing as how I primarily develop on one.
It would have made much more sense to define a new URI scheme.
ICANN is a corrupt organization that has usurped the power to delegate all names, relegating all of them¹ to their² DNS system where, ever since gTLDs, they may be expected lend just about any name. In effect, you are expected not to use a hostname, even on a local network, without paying tribute.
IMO, ICANN needs to be put down, or put to its place, as they do not have a natural right to all hostnames. If they wish to remain an authority on hostnames, they should reserve names for other uses besides DNS.
And stop with the gTLDs - it they give out all interesting TLDs, then there can't be non-colliding alternatives. IMO, if they collide, both are to blame, but ICANN more so than Opera, as they apparently reserve 0 viable host name hierarchies for uses other than DNS.
Please correct me if I'm wrong, some details may be incorrect.
¹ AFAIK exceptions are reserved TLDs: test, example, invalid and localhost. Not really a place for an alternate name system.
² AFAIK there used to be alternative DNS roots.
People use alternative name systems. They can be used with existing protocols and URIs. It's explicitly supported - neither local hosts file nor avahi are DNS. Problem is you need names to use, and you can't really pick non-conflicting ones, if any new gTLDs may be issued by ICANN.
There are alternative name systems, mostly using unique alternative TLDs and AFAIK none of them are registered or reserved at ICANN. I presume ICANN doesn't support it, or they want payments as in gTLDs. Payments for protection against future conflicts, not for a service as they do not resolve in DNS.
The article may not be clear, but AFAICT *.crypto are in fact resolving domains (among doing other things). When I install support for crypto names on my system, am I supposed to use something like:
ping crypto:<domain>
ping --crypto <domain>
How would an alternate URI scheme help?I agree appropriating .crypto in particular may be a bit presumptuous. At the same time, one might expect .crypto to be administered by crypto, in whatever chaotic way people side with, along with the ensuing brokenness.
The best advice is to use a REAL name, that you own. The second best advice is to, if for some reason you insist on using a fake name, pick something with a low probability of causing collisions. .crypto has a very high probability of causing collisions and is thus a terrible choice.
But ICANN would have no qualms whatsoever about selling a TLD just because some other people claimed authority over it they didn't actually have and started misusing it.
If you think ICANN is some sort of magical organization that should get to decide all TLDs, just vote with your feet and don't use Opera.
Think of what a disaster this is going to be if .crypto is launched for real in a few years. Opera is likely going to go with the real .crypto in the root DNS, thus dumping all these blockchain ones, but even if they don't, there's the problem that now .crypto domains will resolve differently in Opera than in all other browsers. That is a security/usability nightmare.
> If you think ICANN is some sort of magical organization that should get to decide all TLDs
There's nothing magical about ICANN whatsoever, and the normative claim you're making here is irrelevant. They are the organization that decides TLDs, period, and pretending that they aren't when the other 99.999% of users and devices on the Internet do use root DNS and root DNS only is a recipe for disaster.
Let me put it in different terms: ICANN currently has a monopoly on the issuance of new TLDs that has so far banked hundreds of millions of dollars for them. There's no way in hell they're going to voluntarily give up this monopoly and just let any random people start a new TLD without going through them.
I assume that if .crypto becomes a TLD, Opera will default to DNS lookup first.
Theoretically, anyone could make a work-alike resolver service that used their own Ethereum node to query for results; in which case any attempts to censor UD could be routed around by pointing opera to a different dns-over-http server (assuming that is configurable, which is really up to opera, not the protocol).
I do like that idea actually -- if I published a self-signed SSL cert for my domain on the Ethereum blockchain, that could be returned and used to validate my domain, without any sort of CA having to be involved. The only trust needed would be that the HTTP-DNS-Ethererum server itself wasn't lying about which public key owned the on-chain domain record.
- https://github.com/unstoppabledomains/zns
- https://github.com/unstoppabledomains/zns/blob/master/REGIST...
- https://github.com/unstoppabledomains/zns/blob/master/RESOLV...
- https://github.com/unstoppabledomains/zns/blob/master/REGIST...
So in the end, I think there is a central registrar for each gTLD, so basically the same as we're doing now, just a different organization behind it and blockchain!1!11oneone
- https://github.com/ipfs-shipyard/ipfs-companion
- https://chrome.google.com/webstore/detail/ipfs-companion/nib...
- https://addons.mozilla.org/en-US/firefox/addon/ipfs-companio...
And I think Brave already ships with IPFS-Companion installed.
But one important detail about content-addressable storage systems like IPFS (and torrents) is that the linked content can never change. The link ipfs://QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco/wiki/Aardvark.html is immutable and will only ever resolve to that specific version of the page. That's fine if you're just sharing a specific version of a document, but it means that this system alone isn't enough if you want to host a site that you update. In order to solve that use-case, you need some mutable link to be involved, like what DNS provides. If you have a standard domain name, you can add a _dnslink TXT record to your domain that contains an IPFS link, and then when someone visits the domain, IPFS-compatible browsers will see the _dnslink TXT record, get the IPFS link from it, and follow that to get the content from the IPFS swarm (which includes anyone that's helping re-host the content) instead of asking some HTTP server for it. When you update your site, you can update the _dnslink TXT record, and browsers will be able to find the new content when someone visits the site.
IPNS is an optional part of IPFS that allows you to make mutable IPNS links that may be updated. This is an attempt to make using an external system like DNS unnecessary to use for making updatable content. It lets you make IPNS links that instead of being based on the hash of the content, are based on a public key that's paired with a private key that you control. The owner of the private key is allowed to broadcast a signed message containing the immutable IPFS link that the mutable IPNS link should resolve to. Sounds great on paper, but it works really slowly for a number of reasons that might be fundamental to how it works. I'm not sure anyone really makes use of it in production. However, a lot of discussions/tutorials about IPFS present IPNS in a way that makes it seem like the standard way to use IPFS, and I think a lot of people get turned off when they see how slow it is and think it's unavoidable or that IPFS is like that in general. The wording of the previous post makes me a little worried the poster believes that too. I wish documentation around IPFS would stop emphasizing IPNS and instead emphasize the DNS integration. You can use DNS+IPFS instead of IPNS+IPFS and it works well; I assume more people use DNS+IPFS than IPNS+IPFS. And eventually we could use decentralized systems like Ethereum Name Service or ZNS instead of DNS once those systems are more popular.
Are ENS and ZNS faster?
With ENS, the source of truth for the current value of all domains is the Ethereum blockchain. Every full Ethereum node has a copy of the blockchain and keeps it updated, so any node can immediately produce an authoritative answer about any domain. ENS still has the property of IPNS that only the holder of a private key can update their domain's current value, but they just have to submit any changes to the blockchain to apply them. This means that a client doesn't have to look any further than any node with a copy of the blockchain to find the current value.
Another benefit of systems like DNS and ENS over IPNS is that DNS and ENS can have human-friendly chosen names. IPNS links are always based on public keys and look like random strings. ENS and IPNS are both decentralized, but only blockchain-based systems like ENS can solve Zooko's Triangle (https://en.wikipedia.org/wiki/Zooko%27s_triangle) and have secure decentralized human-meaningful names. (Blockchains often get a lot of nonsense hype for things they don't make any sense for, but this use-case is specifically the kind of thing that blockchains are uniquely good at!)
Good to know.
This means that you can actually delete the file from your local IPFS client, but if someone manages to create the exact same file and put it on the network, people will access to the file using the same link.
IPFS is a protocol, just like HTTP. So the question could be rephrased as "How do you delete a file from HTTP?" The answer is: you don't. Just as on the web and on the internet, you can link files from your machines. If someone downloads it, they can share it with others. If no one downloads it, and you stop sharing it, it's effectively deleted. Same goes for IPFS.