Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create HIP-xxxx-registrar-allowlist.md #56

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

NetOpWibby
Copy link
Contributor

First draft

@Falci
Copy link
Member

Falci commented Dec 14, 2022

Interesting.
If I understood it, the goal is to protect potential buyers from buying a SLD from an unknown (probably fake) registrar.
I have a few points to comment:

  1. This is not a Handshake exclusive problem, so it could be a RFC for all TLD, ICANN included.
    But somehow, this is a problem we see often.

  2. I don't really like creating a new DNS record type, because it won't be accepted by many DNS services. What if, instead, we use some sort key/value in the TXT.

  3. The expertise required to a user to know about this protocol and be able to understand it is so high, that this user is unlikely to fall for a fake registrar.

  4. Since Handshake aims to decentralisation, it's easy to forecast a future where TLD owners do some sort of configuration to their TLD and any "open source registrar" can register them. In theory, those SLD sold by impervious.domains falls in this category. I could create a brand new website that sells domains like them, and it would be legit.

@NetOpWibby
Copy link
Contributor Author

Thanks for the feedback!

  1. This is gonna need a lot more words to become a proper RFC, haha!
  2. I actually thought about using TXT records first. After all, the value of the record is just a string with semicolons to delineate multiple values. I also thought about making a TXT record for each registrar but that seemed too "bloat-y."
  3. Actually, the end-user I had in mind when writing this HIP was the early adopter who trusts no one and takes the time to verify everything, if possible. When Handshake reaches normie-attention, I think we'll have enough trustworthy and battle-tested registrars.
  4. In this instance, just don't have the record on your TLD.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants