[DNSOP] DNSChain 0.1.0 adds DANE/TLSA support for blockchain + canonical DNS

okTurtles <hi@okturtles.com> Thu, 24 April 2014 21:53 UTC

Return-Path: <hi@okturtles.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A7CB1A03F5 for <dnsop@ietfa.amsl.com>; Thu, 24 Apr 2014 14:53:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.566
X-Spam-Level: **
X-Spam-Status: No, score=2.566 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_36=0.6, J_CHICKENPOX_62=0.6, RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ha92bHSTtedB for <dnsop@ietfa.amsl.com>; Thu, 24 Apr 2014 14:53:48 -0700 (PDT)
Received: from homiemail-a62.g.dreamhost.com (homie.mail.dreamhost.com [208.97.132.208]) by ietfa.amsl.com (Postfix) with ESMTP id CDACD1A03EF for <dnsop@ietf.org>; Thu, 24 Apr 2014 14:53:48 -0700 (PDT)
Received: from homiemail-a62.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a62.g.dreamhost.com (Postfix) with ESMTP id CA55763406E for <dnsop@ietf.org>; Thu, 24 Apr 2014 14:53:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=okturtles.com; h=from :content-type:subject:message-id:date:mime-version:to; s= okturtles.com; bh=OOdsgRTFCA1UhI7KoV3es0AmmVo=; b=CkEyNyOBJlaFb8 BBJ7lCPoUxjN5Ln54C2xYxGoZPMW6BjfOMJ/orkilJjjuWwyoBhZnYB2S8Y7xRq5 Zwcziz4awcOZSWjq4Oq58gBhAEpEV7714MbEXVndMcfr50hQwye+1py47Tw7Nc/G cZakE3URMsk825j4a33OCxlTnr7jk=
Received: from [192.168.1.6] (173-17-72-87.client.mchsi.com [173.17.72.87]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: hi@okturtles.com) by homiemail-a62.g.dreamhost.com (Postfix) with ESMTPSA id 2541B63406C for <dnsop@ietf.org>; Thu, 24 Apr 2014 14:53:40 -0700 (PDT)
From: okTurtles <hi@okturtles.com>
X-Pgp-Agent: GPGMail 2.1 (525b9ae)
Content-Type: multipart/signed; boundary="Apple-Mail=_23CE4DAD-87EA-4C32-8B06-AE6F44824681"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Mao-Original-Outgoing-Id: 420069216.792571-183786d942503b76fc7d6b5b878adbd2
Message-Id: <48AC463C-BE14-4E3A-9CC5-B3A0326B94E2@okturtles.com>
Date: Thu, 24 Apr 2014 16:53:36 -0500
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
To: dnsop@ietf.org
X-Mailer: Apple Mail (2.1874)
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/EVmUFYq6eNOoVzmeDxA_c6m1U6U
Subject: [DNSOP] DNSChain 0.1.0 adds DANE/TLSA support for blockchain + canonical DNS
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2014 21:53:50 -0000

Hi list!

Just published this to NPM and thought it might interest this list.

DNSChain is a DNS + HTTP(S) + Blockchain-proxy hybrid server designed to serve as a decentralized and distributed secure replacement for Certificate Authorities and X.509 PKI.

It's also designed to act as a secure public key distribution system for both websites and identity systems.

Today, with the help of various contributors, we released version 0.1.0:

New Features:
DANE/TLSA support for BOTH canonical DNS and blockchain DNS!
Added NO_OLD_DNS option for oldDNSMethod (refuses all non-blockchain queries)
Improvements:
Redesigned dns.coffee and improved its structure
Accurate ttl values now returned for namecoin DNS queries based on expires_in field
Updated contributors, code and config examples in README.md
Improved EDNS support
Improved handling of ANY queries
Updated dependencies to latest versions
native-dns is now fetched from the dnschain branch of our fork.
Comments added all over the place (to native-dns & related projects also!)
Many other code improvements both to DNSChain and the NodeJS native-dns module
Some performance improvements
Fixes:
Fixed broken grunt example
Fixed some uncaught exceptions (issues #1 and #2)
Fixed broken NAPTR support
Changes:
DNSChain license is now MPL-2.0 (applies to version 0.1.0 onward)
Default logging level is now info

It's compatible with most UNIX-like systems (including OS X) and can be installed via the NPM package manager or manually via Git.

Free public servers (including ones that support DNSCrypt), along with instructions for installing and running DNSChain, is available on its GitHub page:

https://github.com/okTurtles/dnschain

Cheers,
Greg Slepak

--
Please do not email me anything that you are not comfortable also sharing with the NSA.