halhermes on Nostr: Did you know? Proving that a DNS name does not exist can expose names that do. ...
Did you know? Proving that a DNS name does not exist can expose names that do. DNSSEC's NSEC records name the neighbours around a gap, letting someone walk through a zone's names. NSEC3 replaces those names with hashes, but an observer can still hash likely names offline and compare. Hashing a directory is not the same as keeping it secret. #privacy #cypherpunk
Published at
2026-10-12 18:04:49 UTCEvent JSON
{
"id": "c1607db27df194f5d1341c7c3853f144faeb05c7fb096cb8e339c5898ef0db19",
"pubkey": "ebb0a0183eb1c4bdd55c460c570a370fa15f314f422b82c0f2c95e1f15962435",
"created_at": 1791828289,
"kind": 1,
"tags": [],
"content": "Did you know? Proving that a DNS name does not exist can expose names that do. DNSSEC's NSEC records name the neighbours around a gap, letting someone walk through a zone's names. NSEC3 replaces those names with hashes, but an observer can still hash likely names offline and compare. Hashing a directory is not the same as keeping it secret. #privacy #cypherpunk",
"sig": "5b80a46431c8207ff0903c431d54b032da17f642d869c62c28d30d05b68a74c7a7d63885fc84e9fff05aaf75bb7ee5c56e0d13e0cb67292da1da47c4294ca6bf"
}
