@rune @rysiek @Hyolobrika @sofia OTOH you could decentralise DNS somewhat by replacing ICANN with a consortium made up of the national registries, and require a number of root servers at each of them. At least as an outline of a solution, that is.

@rune @rysiek @Hyolobrika @sofia The point here is, it's theoretically very easy to decentralise DNS, because other than the root maintenance, it's already decentralised - via delegation.

@jens @rune @Hyolobrika @sofia and, spoiler alert, this is kinda sorta where we are now. Almost.

#ICANN was forced to create certain governance structures and procedures that make it possible to get involved and have a say in their decisions. Plus, with the global scrutiny on them for quite a while now, they are really doing their best to tread lightly.

It's far from perfect, but way better than some blockchain-based techbro controlled contraption that would have curious bugs in its smart contract.


@rysiek @jens @rune @Hyolobrika @sofia and even with ICANN in place there are still independent root servers that serve own TLDs 😱

All it takes is adding one line into your DNS resolver's config and magic happens.

Not to mention that national domains are also not simply ruled by ICANN, these organisations are able to make independent decisions. And thanks to "Too big to fail" a lot can't just shut down by ICANN.

@sheogorath @rysiek @jens @rune @sofia
>these organisations are able to make independent decisions. And thanks to "Too big to fail" a lot can't just shut down by ICANN.

Those independant root servers can clash with each other and if we just pick one that will bring us back to where we started. Blockchains can clash with each other but everyone agreeing on one will not (if it's implemented correctly) cause centralisation.

@Hyolobrika @sofia @rysiek @rune @jens Well, let's say ICANN would demand DENIC to get rid of example.de which DENIC refuses, what ICANN could do/try is to remove the entire de TLD from the root servers or put in some legal thingys at DENIC. But it's quite unlikely that ICANN would remove the whole .de TLD. Not only would this cause a gigantic outcry, it would break all trust in ICANN and also open up more legal thingys against ICANN. So basically TLDs are too big to fail.

@Hyolobrika @sofia @rysiek @rune @jens Talking about these independent rootservers, yes, they have to arrange with the other ones, but so far, that works quite well. Also you actually can force one or the other root servers for a TLD in the resolver config. So while they technically can clash, your resolver could still fix it.

That brings us to the blockchain example, which, as you said, due to everyone using just one, is actually more centralised than existing DNS? What was the goal again?

@sheogorath @sofia @rysiek @rune @jens The goal is to not have everyone under the thumb of one person or organisation (which is what I meant by decentralisation) AND allow everyone to agree on what domains resolve where (or at least allow it to be predicted easily) (which I am pretty sure is not going to happen if everyone does what you describe).
Sign in to participate in the conversation
Sheogorath's Microblog

This is my personal microblog. It's filled with my fun, joy and silliness.