I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?
I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?
@Sibbo I do not see any problem with Letsencrypt. Any CA which is widely trusted has to follow the same rules. This rules are set up by the CA Browser Forum. Which metadata does LE collect? My server’s IP address, domain and subdomain, mail address. These are logged in the CT logs. Every CA has to log all certificates in a public CT log. Regardless which CA I choose, these data are public. There are not any critical data or metadata that LE can collect.
Letsencrypt can be directly forced to revoke certificates by the US. Organisations outside of the US are less vulnerable against that.
And ICAAN can hand your domain over to US law enforcement regardless of the TLD and your register.
Is that also part of your decision tree?
Is this accurate? Like, I know what you’re meaning, but I’m pretty sure it’s not ICANN doing it, and more so your domain registrar handing it over to the US government.
I think the most control that ICANN has over it is they could theoretically, if they wanted to, delete an entire top level domain. Since they do control the DNS root, but that is the most that they control from what I understand.
I don’t know if they have the ability to delete or transfer control over an individual domain on legal request. I think that’s outside of what their actual system allows for.
Maybe it should be! We need non-fascis-adjacent DNS roots.
https://opennic.org/
There are authorityless blockchain-backed name registration services. In general, it is important whether you can localize a resource. If you can easily find it, the name doesn’t have to human-readable.
if its not human readable, how will people know its the place they want to go to? I don’t think bookmarked onionsites is a particularly good idea
In order to find content, we used to have webrings, directory services, and then search engines. Most people don’t enter URLs by hand.
Aren’t the .country domains managed by the countries?
Who all get that authority from ICAAN
No-one did and you can basically establish you fully independent DNS. The DNS unter ICANN control is just the default.
https://en.wikipedia.org/wiki/Alternative_DNS_root