[therightkey] DNSChain 0.1.0 adds DANE/TLSA support for blockchain + canonical DNS

Tao Effect <contact@taoeffect.com> Thu, 24 April 2014 21:54 UTC

Return-Path: <contact@taoeffect.com>
X-Original-To: therightkey@ietfa.amsl.com
Delivered-To: therightkey@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3BF71A0402 for <therightkey@ietfa.amsl.com>; Thu, 24 Apr 2014 14:54:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.566
X-Spam-Level: **
X-Spam-Status: No, score=2.566 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_36=0.6, J_CHICKENPOX_62=0.6, RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yB41x46bh3AI for <therightkey@ietfa.amsl.com>; Thu, 24 Apr 2014 14:54:49 -0700 (PDT)
Received: from homiemail-a37.g.dreamhost.com (homie.mail.dreamhost.com [208.97.132.208]) by ietfa.amsl.com (Postfix) with ESMTP id 840271A03FD for <therightkey@ietf.org>; Thu, 24 Apr 2014 14:54:49 -0700 (PDT)
Received: from homiemail-a37.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a37.g.dreamhost.com (Postfix) with ESMTP id 81A9420806B for <therightkey@ietf.org>; Thu, 24 Apr 2014 14:54:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=taoeffect.com; h=from :content-type:subject:message-id:date:mime-version:to; s= taoeffect.com; bh=Wk8SS4aNcWleaEKaMcPms1yXRhA=; b=pQxegN7h062xr+ YtA5V9bRoXV9PgNHYh7/EyVgL9dzICiRKRwLvAX3hv9JMszBOMjYQ8314a+lsIHJ UzrxlTzVM+geYfSJVbGxdFb1JQqZwgrdXoMzy4rKtUXOkt70PxLkOhZ6I+p6Wjv/ 6adjKlg0xGBsELATN9i0OTvhCvZXI=
Received: from [192.168.1.6] (173-17-72-87.client.mchsi.com [173.17.72.87]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: contact@taoeffect.com) by homiemail-a37.g.dreamhost.com (Postfix) with ESMTPSA id 60D1C208063 for <therightkey@ietf.org>; Thu, 24 Apr 2014 14:54:42 -0700 (PDT)
From: Tao Effect <contact@taoeffect.com>
X-Pgp-Agent: GPGMail 2.1 (525b9ae)
Content-Type: multipart/signed; boundary="Apple-Mail=_E4EF1FE1-B8DB-4921-B569-A78A1A31A480"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Mao-Original-Outgoing-Id: 420069279.252649-9ea420ea695a9a7f670141b278a10825
Message-Id: <C4D19395-C5AC-4D46-BC03-2A646B7B43F0@taoeffect.com>
Date: Thu, 24 Apr 2014 16:54:39 -0500
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
To: "therightkey@ietf.org" <therightkey@ietf.org>
X-Mailer: Apple Mail (2.1874)
Archived-At: http://mailarchive.ietf.org/arch/msg/therightkey/nqSQe_a_UU3qxxNoMgrhGstsnB4
Subject: [therightkey] DNSChain 0.1.0 adds DANE/TLSA support for blockchain + canonical DNS
X-BeenThere: therightkey@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <therightkey.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/therightkey>, <mailto:therightkey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/therightkey/>
List-Post: <mailto:therightkey@ietf.org>
List-Help: <mailto:therightkey-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/therightkey>, <mailto:therightkey-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2014 21:54:51 -0000

Hi list!

Just published this to NPM and thought it might interest some of the folks here.

DNSChain is a DNS + HTTP(S) + Blockchain-proxy hybrid server designed to serve as a decentralized and distributed secure replacement for Certificate Authorities and X.509 PKI.

It's also designed to act as a secure public key distribution system for both websites and identity systems.

Today, with the help of various contributors, we released version 0.1.0:

New Features:
DANE/TLSA support for BOTH canonical DNS and blockchain DNS!
Added NO_OLD_DNS option for oldDNSMethod (refuses all non-blockchain queries)
Improvements:
Redesigned dns.coffee and improved its structure
Accurate ttl values now returned for namecoin DNS queries based on expires_in field
Updated contributors, code and config examples in README.md
Improved EDNS support
Improved handling of ANY queries
Updated dependencies to latest versions
native-dns is now fetched from the dnschain branch of our fork.
Comments added all over the place (to native-dns & related projects also!)
Many other code improvements both to DNSChain and the NodeJS native-dns module
Some performance improvements
Fixes:
Fixed broken grunt example
Fixed some uncaught exceptions (issues #1 and #2)
Fixed broken NAPTR support
Changes:
DNSChain license is now MPL-2.0 (applies to version 0.1.0 onward)
Default logging level is now info

It's compatible with most UNIX-like systems (including OS X) and can be installed via the NPM package manager or manually via Git.

Free public servers (including ones that support DNSCrypt), along with instructions for installing and running DNSChain, is available on its GitHub page:

https://github.com/okTurtles/dnschain

Cheers,
Greg Slepak

--
Please do not email me anything that you are not comfortable also sharing with the NSA.