Hacker Newsnew | past | comments | ask | show | jobs | submit | randompeach's commentslogin

ISRG generated two new roots a few days ago. - Root YE - Root RE


Meerfarbig in Frankfurt.

Nikhef in Amsterdam.

Both are good options.


SMIME will become PQC as well as GPG (as of my knowledge).

SMIME will also get an ACME standard for issuing. Including a handful of CAs that will likely issue free Certificates for it.


But SMIME is has single point of failure which is always a bad thing, with AI advancements in reverse engineering and hacking this can be automated with sophisticated brute force to gain access to singular systems.


As of my knowledge: no.


I personally find token2 really nice.


Thanks, their devices look interesting. Open source firmware and good pricing.


Let’s start my comment new /o\

My guess is that noting will happen for now. It’s mostly a decision that ICANN working groups have to figure out. But given the current size of the .io zone and that we already have a non existing cctld (.su for Soviet Unite), I’m pretty confident it will exist in the mid-term future.


.su is administered by the Russian national registry, because Russia is de facto the Soviet Union’s successor state. In this case, though, would .io stay with the UK or come under Mauritian control? It’s not clear.


Like the other remnants of the British Empire, the British Indian Ocean Territory was never a part of the UK. It was just land that we (the UK) expropriated from Mauritius at independence. A just solution would be for Mauritius, as the (now) actual successor state, to control dot-io.

IMO what will probably happen is that ICANN "promotes" the zone to being yet another top-level non-country code domain like .biz or .horse etc. Which is effectively what it is now.

Edit to add:

I don't think the .su precedent is applicable here. The Soviet Union was an internationally recognised state with a population, military, Montevideo Convention duties, seat at the UN, etc. The BIOT was and is nothing like that.


This isn't quite true for Ascension or the Falkland Islands, they were both uninhabited when discovered and they're not part of any existing country


I'm not sure of the point you're making.

Sure, there's a lot of evidence that they were "terra nullius" before being claimed for the British empire. But the Chagos archipelago was inhabited utill its population was compulsorily expelled in the mid twentieth century.

I was surprised to discover that Ascension even has a ccTLD. I guess I assumed that the population was wholly military.


> I was surprised to discover that Ascension even has a ccTLD

That's because it was created by the same guy who created .io and .sh - British DNS "pioneer" Paul Kane, who clearly had a passion for finding remaining corners of the British Empire that could "claim" a bit of internet land (for his own profit).


Turning dot-io into a gTLD is certainly seems like the best course of action, but I think it's far from likely that ICANN will do that considering that there are no other two-letter gTLDs.


Why would the length of the domain name matter?


By policy, 2-letter TLDs are reserved for ccTLDs, matching ISO country codes.


There are not that many two letter codes (a comment said 26*26= 676) and they are reserved for country codes. Global tlds are three letters and up (eg com org etc)


Well, this one is special, by virtue of being in widespread commercial use.

ICANN will act in whatever manner causes them the least trouble, which will be to retain the status quo. They have absolutely no incentive to behave otherwise.


> ICANN will act in whatever manner causes them the least trouble ... They have absolutely no incentive to behave otherwise

It's pretty detrimental to relationships when one side pre-declares their rules and policies, and then arbitrarily decides to ignore them.

I'd say they have a lot of incentive to behave in whatever way their published policies state, regardless of the impact to users of the cctld.

(I don't know what the policies are)


because there are fewer combinations of two-letter codes. This is also why they are reserved to actual countries.


Yeah but it's not like ISO is going to reuse the code "io" for some other future country.


You don't know that.


> In this case, though, would .io stay with the UK or come under Mauritian control? It’s not clear.

Before the retirement of .yu, Slovenia wanted to hold on to it, but it was not the successor state of Yugoslavia so they had to relinquish control and pass it to Serbia. So going by that logic, it would not stay in the UK (for long).


British Indian Ocean Territory isn’t a state, it’s just a territory with a military base on it, so there is no successor state.

It’s like if Guantanamo Bay had its own ccTLD.

The land will go to Mauritius, the legal entity of British Indian Ocean Territory will cease to exist (presumably).


> The land will go to Mauritius

Mauritius could decide to incorporate it as "Mauritius Indian Ocean Territory", hence maintaining the CC. I expect .io owners will likely suggest something like that, while showing them how much money they could get from a 10-15% deal similar to what Tuvalu has for .tv. Nobody likes to burn money.


I recognize this, but that’s the closest equivalent.


ccTLDs other than .su have been retired when the country they represented ceased to exist or got renamed. .zr, .tp, .cs (twice?) according to [0]

I agree with you though, there doesn't seem to be a strong rule for this kind of thing and all interested parties would likely prefer for .io to continue to exist, so it will continue to exist, probably under Mauritius's ownership.

[0] https://snapshot.internetx.com/en/these-tlds-do-not-exist-an...


„German Family Business“ is my bet.

They have their own internal security team, that handles activation on a case by case basis. Some users need to verify at the beginning, some after a week and other do not have to verify at all.

As you can imagine, at that price point, people will abuse the sh* out of the platform. From public posts it lookalike the main indicators are: - country you provided - IP based Country - Payment method - Payment method returned country - order size - order pattern (something like spawn a server, abuse stuff, order new OR many servers at the beginning)

Sadly you just need to wait. I wish they would have other solutions. But for now that’s it :-/


Yeah, but from a business perspective, they're definitely losing clients with this approach.

I get that they want to avoid abuse, but this whole random verification thing is frustrating for legit users.

They should really consider a smoother, more consistent system to keep people happy without sacrificing security


I mean… they don’t need to care that much with 200mio€ profit.

But yes a smother signup, potentially coupled with a prepaid credit (via 3-D Secure) and or eID would be the easiest and safest solution for everyone.

Atleast if it’s clearly stated how and why that is required.


Depends on the volume. But it’s mostly under the 80k required capital.

There are even some open source implementations for the backends.

Most expensive points are the required employees and the signup fees (and prepaid) for other registry’s like .xyz


DNS via cloudns for example is around 10ct per Zone per Month via there DDoD Protected package.

Email Infrastructure (for renewal etc.) can be acquired over different services like postmark.

Validation of contact data can be expensive too. However maybe something like nominatim could do the trick.

Another thing is infrastructure for Whois/RDAP.

Then you need standard things like Whois privacy (there is a document by icann for requirements).


I would guess that 8-10k per year without the icann / tld fees, is a good starting point.


Even though it's discouraged I want to say thanks for these excellent points, that's very helpful!


age-encryption.org their project has a good documentation / standard of how age encryption works. Helped me to understand this topic better.


Hey Ehm short questions: didn’t .new have a requirement for the usage of the TLD?

e.g. example.new should forward to a website that allowed to create examples?


Fair question. The requirement is to create something new or content, and the first thing you do once you log in is exactly that. Doesn't take you anywhere else but to create.


As in: not that google decides to remove the domain, because you did not follow the requirements thing and only as “wasn’t there something” from my side.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: