The issue with doing DNS delegation is that it doesn't work behind Tor. It would work on the exit node, but it would be very limiting if you could only use participating exit nodes.
That's true, but I'm still impartial about this. I still think most people would want the system to work as a domain registry. I wish more people gave their opinion about this. So if someone's going to launch a DNS bridge next week, would you recommend them
not to include this functionality?
I would like this software to work as a domain registry too. All DNS servers in the world already work in a decentralized way. The only thing that is centralized is domain registry, and that is where domains are seized.
Here is an example :
A. domain :
bitcoin-contact.orgB. nameservers : NS0.WEB-SWEET-WEB.NET, NS1.WEB-SWEET-WEB.NET
C. zone config (simplified) :
IN NS ns0.web-sweet-web.net.
IN NS ns1.web-sweet-web.net.
* IN A 188.165.40.52
www IN A 188.165.40.52
So, to explain how it works :
A. domain registry owns bitcoin-contact.org and say it is managed by two name servers : NS0.WEB-SWEET-WEB.NET, NS1.WEB-SWEET-WEB.NET
B. name servers are standard DNS servers that respond to dns queries : bitcoin-contact.org => 188.165.40.52, or
www.bitcoin-contact.org => 188.165.40.52
On your domain registry account, you can change the 2 nameservers if you want, and dns queries for your domain will be sent to those new servers. This is where the system is decentralized, because you can use whatever dns server you want (and make your own too).
But, other people (your domain provider, ICANN, etc) can change those two nameservers, because they control your domain (directly or indirectly). They can also lock you domain registry account.
So, the only part that still needs to be decentralized is domain registration, with name servers associated.
In the namecoin system, this may looks something like :
{
'domain':'mydomain.bit',
'nameserver':
[
"NS0.WEB-SWEET-WEB.NET",
"NS1.WEB-SWEET-WEB.NET",
"NS0.XNAME.ORG",
"NS1.XNAME.ORG",
"87.98.164.164",
]
}
Then, re-use a standard DNS server to do everything else, to be compatible with existing technology.