Patrick Mevzek

"Do not go gentle into that good night."

Flying in registration and resolution planes since 1997.

Duduk fan.

Last Notes

2026-09-07 16:13:27 UTC

- reply

There could be more of them... but they are all feeding themselves out of hidden primary root controlled by Verisign, a US corporation. So at the end, those public ones don't really count. Except if you consider they might, collectively, all decide to use another root than IANA one which is never impossible but quite not the highest probability. (and see previous court cases about .LY yes there were attempts to remove TLDs from root). They also all have relationships with ICANN. 1/x

2026-07-16 20:31:36 UTC

- reply

For better help, maybe give your domain name and a summary of what you did and what happens?

2026-04-09 15:43:12 UTC

- reply

For simple straightforward needs, NSD might be just what you need. Far simpler to configure, because only authoritative, where bind was always both authoritative and recursive, which created endless security vulnerabilities, now long gone, but still means you have to be more careful in the configuration. So bind is like the army knife and you need to be careful for big zones or big amount of zones. There is also PowerDNS, KnotDNS and CoreDNS. Ideally, diversify and use secondaries.

2026-02-02 17:07:24 UTC

- reply

"It’s so annoying that they basically hand out IP addresses if you want them". No, not the case today. You have to be a member of RIR and prove use of IPs, and certainly not for scarce IPv4 addresses. Plus that space is far from litigation/problems, see the Afrinic saga? "ICANN is a shitty company anyways" but it is not a company at all… ICANN is a late 199X invention. Noone saw needs of regulations there before the Web exploded in use. Alternative would/could have been the UN/ITU…

2025-08-10 04:01:37 UTC

- reply

Not ideal because of the cost and maintenance, but you can plug "self hosted" runners, aka servers running wherever you want and let them run the GHA jobs and workflows. You still have all the GH tooling, but also have stricter control on where your tests execute and what they have access to.

2025-08-08 21:51:45 UTC

- reply

That is very far from current registry price. You can find at https://www.dot.bs/one various registrars offering it for less than $10. Are you quoting (future) registry prices or some specific registrar?

2025-07-24 21:27:57 UTC

- reply

Of course it exists, registered since `1996-07-23T04:00:00Z` per RDAP output. Maybe it doesn't resolve, but is something not visible not existing necessarily :-) ?

2025-01-16 05:38:49 UTC

- reply

"IIRC, DNS is literally a two column database.." Oh no please don't say that. It is a tree. A tree is never something easy and natural to store in a database. A two column database certainly can't handle wildcards or ENTs properly. DNS is not just mapping names to IP addresses. It has become far more than that.

2024-12-17 19:04:27 UTC

- reply

All of that is WebAuthN basically (also called more or less correctly FIDO2). Wikipedia article on it is not bad: https://en.wikipedia.org/wiki/WebAuthn

2024-10-08 20:00:10 UTC

- reply

"It is possible that the .io ccTLD will become a generic TLD," I don't see how. If ISO really removes it, it won't be removed but put in "reserved" list (see `fx` as example). After which ICANN will certainly not allow anything using it.

2024-09-14 03:11:06 UTC

- reply

"buying a crypto domain, just so I never have to pay a renewal fee again.". Yeah right... totally not: "https://support.ens.domains/en/articles/7900608-renewals": "Both registration and renewal fees help fund the continued development of the ENS protocol. The cost for renewal of your .eth name is currently the same fee structure as registering a new .eth name."

2024-09-10 22:27:52 UTC

- reply

Yes purely for resolution you need a gateway or a client "integrated" somehow with the chain. Hence limited reach today. But separate from that the name is also to be able to say to anyone "send me tokens to foobar.fun" instead of "send me tokens to my wallet address of 0xcafedeadbeef". A nicer moniker if you want. For which you need to prove "binding" between the name (that resolves in the DNS) and the wallet address on chain.

2024-09-10 22:11:22 UTC

- reply

Very summarized, you buy domain `foobar42.example`, you make sure its DNS zone has a specific TXT record and it is protected by DNSSEC, then you can claim the same name on some blockchain like ETH, where code will check you are the rightful owner of the name (thanks to the DNS configuration) and hence assign the name to your wallet on the chain. Can happen at the TLD level too. Then resolution can happen through the blockchain, if desired, but this is additional/separate.

2024-09-10 21:41:13 UTC

- reply

Same idea exists now under other TLDs, so "real" domains. See for example https://docs.ens.domains/dns/tlds and https://circleid.com/posts/20240814-unstoppable-domains-receives-icann-accreditation

2024-08-30 16:58:47 UTC

- reply

"DNS is not ready for IPv6" :-) https://labs.apnic.net/presentations/store/2024-02-09-dns-oarc.pdf. #DNSOARC #DNS #IPV6