Re: [saag] post-X509 cryptographic identities

[Tony Rutkowski <[e-mail]>]

Hi Nico,

We have had hierarchical trusted name systems for a while.  PSTN numbers 
still serve that function - which drove ENUM.

The old idealized legacy DNS model arguably disappeared with vigorous 
competition among alternative root servers, e.g, 1.1.1.1, 8.8.8.8, etc.

Then there is also the shift to E2E MEF Ethernet...or with DONA's Handle 
System.

All of this arguably underscores the continuing need for a trusted PKI 
cert.  As you note, sovereign registries have value.

--tony


On 2020-02-13 12:13 PM, Nico Williams wrote:
> On Thu, Feb 13, 2020 at 02:51:01PM +0000, Tony Finch wrote:
>> Nico Williams <[e-mail]> wrote:
>>> Can we move past domainnames?  Maybe.  What is realistic?
>>>
>>> One possibility is to do everything via smartphone apps, with app store
>>> operators acting as curators.  Naming would still be about (trade)marks
>>> (including icons, at least for those who are not sight-impaired), but we
>>> might get past domainnames.  Who wants such a world?
>> When I wonder about this kind of thing, I try to think about the
>> practicalities: would the OS vendors want to run registries for hundreds
>> of millions of names themselves, or would they prefer to outsource it?
> That's the gist, isn't it.  Registries.  Authorities.  Ultimately a tie
> to legal dispute resolution mechanisms.  Messy stuff.
>
> DNS was a worldwide revolution in naming affairs by creating a scalable,
> global registration and authority system to go with a scalable
> resolution system.
>
> (From a UI perspective, DNS is just an evolution: before we had names,
> after we had names.)
>
> DNS and the Internet created realities on the ground that sovereign
> entities had to recognize.  That seems likely an accident of DNS
> stepping into a vacuum.  Now that the vacuum has been filled, any
> replacement may well require significantly more willpower to establish.
>
>> Would the setup be something like certification authorities? How would
>> the namespace relate to the market structure: would they be parallel
>> like the DNS, or unrelated like WebPKI? Would we end up with something
>> like the CA/B forum, except also responsible for the top-level of the
>> namespace, and thus effectively performing the same function as ICANN?
> Yes, any future revolution in naming will have to deal with registries,
> and will have to deal with sovereign entities.
>
> Nico