Thanks for the detailed technical feedback, it's why I'm here.
> Why is RDAP limited if anybody can just use a client and any server on the internet that fulfils the same spec?
RDAP as a technology and RFC isn't limited or restricted of course, just like restful APIs as a technology are not limited. However, the implementation of the technology is limited. The servers offered by registrars and registries will be limited and the access and use of data restricted.
We promote NUM as unlimited and unrestricted because NUM records (whether in authoritative nameservers or under num.net) are hosted in DNS and requests can not easily be tracked or rate limited.
> I'd argue that the DNS protocol wasn't designed for the purpose that the NUM protocol seems to have as its goals
I disagree, we're using vanilla DNS TXT records which have existed in DNS since '94 [1]: "This paper proposes the use of the DNS TXT resource record [...] to contain new types of information."
Most NUM Records can be transported over UDP, even under the original 512b limit. A NUM record containing let's say 20 typical key value pairs is smaller than a DNSSECd A record and smaller than millions of DNS TXT records at a domain apex (dig target.com TXT).
> given the overhead of schema validation that each client has to do for themselves
Validation is minimal and is dealt with at a library level, as it will be with RDAP or any other API. The fact that mainstream data serialisation formats (e.g. JSON, YAML, etc) are not designed for DNS, does not mean that DNS is not designed to store serialised data. We created MODL [2] to solve this problem.
To demonstrate low overhead, we have a heavy example implementation that fetches 62 NUM records, validates them and displays them in 1.6 seconds [2].
> Honestly in times of GraphQL making predictable queries as easy and as built-in as possible...
This data is already centralised in graphs by Facebook, Google and more. There was an effort to decentralise it with the Semantic Web. We're offering an alternative to both, where users can retain their privacy, developers can actually build scalable, profitable products (as opposed to using Google / Facebook APIs) and the data is actually available (as opposed to SemWeb).
> ... the NUM protocol feels like a huge setback in terms of transport encryption, integrity, predictability of state complexity and confidentiality.
These seem like complaints about DNS which are addressed by DNSSEC, DNS over TLS (DOT), DNS over HTTPS (DOH), DPRIVE and Oblivious DNS-over-HTTPS (ODOH).
Thanks again for your thoughts, happy to dive deeper into any of this.
1. https://datatracker.ietf.org/doc/html/rfc1464
2. https://companydirectory.uk/barclays.co.uk/contact-informati...
3. https://www.modl.uk