▲ 346 ▼ Letsencrypt is under US jurisdiction. Is there a free-er alternative? (sopuli.xyz) submitted 1 month ago by Sibbo@sopuli.xyz to c/selfhosted@lemmy.world 156 comments fedilink hide all child comments I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?
[–] veniasilente@lemmy.dbzer0.com 9 points 1 month ago (7 children) Maybe it should be! We need non-fascis-adjacent DNS roots. permalink fedilink source parent hideshow 7 child comments replies: [–] frongt@lemmy.zip 8 points 1 month ago https://opennic.org/ permalink fedilink source parent [–] NotEasyBeingGreen@slrpnk.net 1 point 1 month ago I worked on the Yeti Project a while ago, which showed that an independent group of operators can run root servers. Managing the contents of the root zone was out of scope... we used the ICANN root. permalink fedilink source parent [–] eleitl@lemmy.zip -2 points 1 month ago* (4 children) There are authorityless blockchain-backed name registration services. In general, it is important whether you can localize a resource. If you can easily find it, the name doesn't have to human-readable. permalink fedilink source parent hideshow 4 child comments replies: [–] WhyJiffie@sh.itjust.works 4 points 1 month ago (1 child) if its not human readable, how will people know its the place they want to go to? I don't think bookmarked onionsites is a particularly good idea permalink fedilink source parent hideshow 1 child comment replies: [–] eleitl@lemmy.zip 1 point 1 month ago In order to find content, we used to have webrings, directory services, and then search engines. Most people don't enter URLs by hand. permalink fedilink source parent [–] veniasilente@lemmy.dbzer0.com 2 points 1 month ago (1 child) The root (haha) of needing better DNSes is because the ones that are are tied to technofascists and their ilk: techbros, nazis, psycopaths. So using something with blockchain sounds quite missing the point. permalink fedilink source parent hideshow 1 child comment replies: [–] eleitl@lemmy.zip 1 point 1 month ago You do understand that a P2P proof of work backed global store is just infrastructure? And as egalitarian as DNS servers? And it doesn't have the storage/compute footprint of a full bitcoin node. The space of human-readable names is quite small, so proof of work is needed to protect it from being flooded. An alternative is to have your servers have names to be or derived from their public keys, or dissolve content from its location. Which brings its own problems. permalink fedilink source parent
[–] NotEasyBeingGreen@slrpnk.net 1 point 1 month ago I worked on the Yeti Project a while ago, which showed that an independent group of operators can run root servers. Managing the contents of the root zone was out of scope... we used the ICANN root. permalink fedilink source parent
[–] eleitl@lemmy.zip -2 points 1 month ago* (4 children) There are authorityless blockchain-backed name registration services. In general, it is important whether you can localize a resource. If you can easily find it, the name doesn't have to human-readable. permalink fedilink source parent hideshow 4 child comments replies: [–] WhyJiffie@sh.itjust.works 4 points 1 month ago (1 child) if its not human readable, how will people know its the place they want to go to? I don't think bookmarked onionsites is a particularly good idea permalink fedilink source parent hideshow 1 child comment replies: [–] eleitl@lemmy.zip 1 point 1 month ago In order to find content, we used to have webrings, directory services, and then search engines. Most people don't enter URLs by hand. permalink fedilink source parent [–] veniasilente@lemmy.dbzer0.com 2 points 1 month ago (1 child) The root (haha) of needing better DNSes is because the ones that are are tied to technofascists and their ilk: techbros, nazis, psycopaths. So using something with blockchain sounds quite missing the point. permalink fedilink source parent hideshow 1 child comment replies: [–] eleitl@lemmy.zip 1 point 1 month ago You do understand that a P2P proof of work backed global store is just infrastructure? And as egalitarian as DNS servers? And it doesn't have the storage/compute footprint of a full bitcoin node. The space of human-readable names is quite small, so proof of work is needed to protect it from being flooded. An alternative is to have your servers have names to be or derived from their public keys, or dissolve content from its location. Which brings its own problems. permalink fedilink source parent
[–] WhyJiffie@sh.itjust.works 4 points 1 month ago (1 child) if its not human readable, how will people know its the place they want to go to? I don't think bookmarked onionsites is a particularly good idea permalink fedilink source parent hideshow 1 child comment replies: [–] eleitl@lemmy.zip 1 point 1 month ago In order to find content, we used to have webrings, directory services, and then search engines. Most people don't enter URLs by hand. permalink fedilink source parent
[–] eleitl@lemmy.zip 1 point 1 month ago In order to find content, we used to have webrings, directory services, and then search engines. Most people don't enter URLs by hand. permalink fedilink source parent
[–] veniasilente@lemmy.dbzer0.com 2 points 1 month ago (1 child) The root (haha) of needing better DNSes is because the ones that are are tied to technofascists and their ilk: techbros, nazis, psycopaths. So using something with blockchain sounds quite missing the point. permalink fedilink source parent hideshow 1 child comment replies: [–] eleitl@lemmy.zip 1 point 1 month ago You do understand that a P2P proof of work backed global store is just infrastructure? And as egalitarian as DNS servers? And it doesn't have the storage/compute footprint of a full bitcoin node. The space of human-readable names is quite small, so proof of work is needed to protect it from being flooded. An alternative is to have your servers have names to be or derived from their public keys, or dissolve content from its location. Which brings its own problems. permalink fedilink source parent
[–] eleitl@lemmy.zip 1 point 1 month ago You do understand that a P2P proof of work backed global store is just infrastructure? And as egalitarian as DNS servers? And it doesn't have the storage/compute footprint of a full bitcoin node. The space of human-readable names is quite small, so proof of work is needed to protect it from being flooded. An alternative is to have your servers have names to be or derived from their public keys, or dissolve content from its location. Which brings its own problems. permalink fedilink source parent