# Decentralised solid domains?

**URL:** <https://forum.solidproject.org/t/decentralised-solid-domains/408>\
**Category:** Security\
**Created:** [November 6, 2018, 1:19pm UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408 "2018-11-06T13:19:46Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![MitziLaszlo](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/mitzilaszlo/32/191_2.png) [@MitziLaszlo](https://forum.solidproject.org/u/MitziLaszlo)\
**Post date:** [November 6, 2018, 1:19pm UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/1 "2018-11-06T13:19:46Z")

</div>

@melvincarvalho wrote:

## Solid Name System

Many decentralized web advocates come to solid but raise concerns about the dependency on the DNS system.

I wonder if we could in parallel to the web design a system to use .solid domains. Similar systems are [.onion](https://en.wikipedia.org/wiki/.onion) and [.bit](https://en.wikipedia.org/wiki/.bit)

see more : [https://en.wikipedia.org/wiki/Alternative\_DNS\_root](https://en.wikipedia.org/wiki/Alternative_DNS_root)

I’ve had informal conversations with IETF people and they seem to think this is technically feasible.

## Open Questions

So this issue is a place holder to brain storm design out the possibility of .solid domains.

- How would they be looked up
- What would the URLs return
- How would you prevent people squatting lots of domains

It would also be good if we talk to someone at ICANN and ask them save this for us.

1. How would they be looked up?

Initial thoughts on how the routing could work.

Create a special nick solidns (solid naming service) that will manage routing.

Then in various pods you would have

/.well-known/solidns/example  
This would map to the domain example.solid

This would return machine readable data (turtle) which would be equivalent to a DNS name server.

Via a bootstrap .solid supporting user agents would look up the .solid record using HTTP, and then route the request accordingly.

The governance of /.well-known/solidns would be a different question. We would have to create a technical set of norms managed by the community.

## 2. What would the URL return

There are two URLs the .solid URL (used for content) and the solidns url (used for lookup)

### What does the .solid URL return?

Would return a standard web document

After the routing you will end on a solid pod that contains the content

### What does the solidns URL return?

Well this would be RDF of course

A simple starting point would be to create a minimal subset of the DNS system (which can be modeled in RDF)

An ontology could be developed to capture the common terms

Perhaps the devil is in the detail in some cases and this will tie in to (1) also

_This section is partially incomplete needs more work_

## 3. How would you prevent people squatting lots of domains

This is perhaps as much a social problem as technical one. But solid is designed to be social.

The community would have to create a sensible set of rules that makes sense for the system and worked practically. A [web of trust](https://en.wikipedia.org/wiki/Web_of_trust) which is used in GPG may be leveraged to prevent one person registering too many domains.

There is also the concept of a [strong set](https://pgp.cs.uu.nl/plot/) in the web of trust. We could perhaps have an sss (like the www on its side) to mean the _Solid Strong Set_ , where members were part of the community and have agreed to a code of conduct.

The community would need to come up with sensible rules to get the system going. This would require reading some literature and brain storming. One _possible_ way would be :

- Each user is allowed to claim one .solid domain
- In order to get a new domain they have to give up their old .solid domain

These are just rough ideas. Hopefully they can be fleshed out into a proposal and working system. Feedback welcome.

There has been some discussion on [https://github.com/solid/solid/issues/201](https://github.com/solid/solid/issues/201) with @megoth, @kjetlk, @daniel-albrecht, @steven-tomilnson, and @tiagosomda and would like to invite more here.

---

<div class="post-metadata">

**Author:** ![adventure](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/adventure/32/1152_2.png) [@adventure](https://forum.solidproject.org/u/adventure)\
**Post date:** [November 13, 2018, 12:18pm UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/4 "2018-11-13T12:18:54Z")

</div>

@Mitzi László I deleted a couple of posts I made on this forum because I have changed my mind, I agree with you that a .solid domain should be reserved and Inrupt should contact ICANN to reserve the same. Not sure if I agree with you on the domain squatter issue of 1 to 1, and/or 1 for 1. A “domain squatter” a/k/a, “investor” should be welcome because this is an ecosystem. If we were to really breakdown the domain squatter issue, they are and should be considered investors, the same as an individual who purchase stock/units in a startup considers perceived value. Because investors perceive that the value of a .solid domain in the future will be greater than the current price tag, is not so different than someone purchasing stock in a company that’s trading at 20 times earnings. That being said, I look forward to hear your thoughts.

---

<div class="post-metadata">

**Author:** ![Ornataweaver](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/ornataweaver/32/341_2.png) [@Ornataweaver](https://forum.solidproject.org/u/Ornataweaver)\
**Post date:** [November 16, 2018, 10:43am UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/5 "2018-11-16T10:43:20Z")

</div>

Why do you need domains, when data can have fingerprints?

---

<div class="post-metadata">

**Author:** ![themchimself](https://avatars.discourse-cdn.com/v4/letter/t/43a26b/32.png) [@themchimself](https://forum.solidproject.org/u/themchimself)\
**Post date:** [November 25, 2018, 7:07pm UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/6 "2018-11-25T19:07:07Z")

</div>

DNS requests have to go somewhere.

I was actually surprised that no one here has brought up [handshake.org](http://handshake.org)

---

<div class="post-metadata">

**Author:** ![Ornataweaver](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/ornataweaver/32/341_2.png) [@Ornataweaver](https://forum.solidproject.org/u/Ornataweaver)\
**Post date:** [November 29, 2018, 1:04am UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/7 "2018-11-29T01:04:48Z")

</div>

You send a DNS request when you go to a website.  
What if we live on the latest linked data packages. We wouldn’t need websites.

---

<div class="post-metadata">

**Author:** ![aveltens](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/aveltens/32/3987_2.png) [@aveltens](https://forum.solidproject.org/u/aveltens)\
**Post date:** [November 29, 2018, 7:28am UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/8 "2018-11-29T07:28:46Z")

</div>

The GNUnet project might also have an alternative: GNS

> **[GNUnet](https://www.gnunet.org/en/)**
>
> GNU's framework for secure p2p networking

> The GNU Name System (GNS) is secure and decentralized naming system.

I did not take a deeper look into it, yet, but perhaps one of you will

---

<div class="post-metadata">

**Author:** ![Sea](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/sea/32/90_2.png) [@Sea](https://forum.solidproject.org/u/Sea)\
**Post date:** [December 13, 2018, 12:18pm UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/9 "2018-12-13T12:18:52Z")

</div>

new gTLDs can stipulate rights and uses. For instance, the general public cannot register a .bank domain - they must be an accredited, certified bank with a certain level of secure infrastructure. Same with .ong/.ngo - they must prove their status as NGOs.

.SOLID domains hence could be reserved for those who successfully deploy qualified and authenticated Solid servers. For fundraising, the premium variants could be reserved, though ideally nothing crazy like the 100s of thousands some cost - further wasting otherwise wonderful domains. For an idea how NOT to run a gTLD program, see .ART.

As an aside, we are looking at an alternate, distributed DNS through our Holochain development, and continue to research current ideas already out there. I think we need a paradigm of thought for next generation DNS, and that’s what we’re exploring. Once we have a better handle on Holo, and Solid, we’ll have more to share.

Let’s set up COLLABORATIVE networks, not COMPETITIVE.

Good work all on this question.

---

<div class="post-metadata">

**Author:** ![aschrijver](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/aschrijver/32/463_2.png) [@aschrijver](https://forum.solidproject.org/u/aschrijver)\
**Post date:** [December 14, 2018, 12:13pm UTC](https://forum.solidproject.org/t/decentralised-solid-domains/408/10 "2018-12-14T12:13:49Z")

</div>

Not sure to which level this applies to Solid (and not being an export in both subjects), I want to add reference to:

### DNS over HTTPS

> **[DNS over HTTPS](https://en.wikipedia.org/wiki/DNS_over_HTTPS)**
>
> DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks by using the HTTPS protocol to encrypt the data between the DoH client and the DoH-based DNS resolver. By March 2018, Google and the Mozilla Foundation had started testing versions of DNS over HTTPS. In February 2020, Firef An alternat...

### Web of Trust, DID, SSI

Rebooting Web-of-Trust: [http://www.weboftrust.info/specs.html](http://www.weboftrust.info/specs.html)  
Their Github repo’s: [GitHub - WebOfTrustInfo/rwot6-santabarbara: RWOT6 in Santa Barbara, California (March 2018)](https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust-spring2018)

An issue (to me at least) is that many discussions about Decentralized Identifiers and Self-Sovereign Identity require blockchain solutions (to which I am very sceptic). But they do not _require_ blockchain per se. There was an effort to create IPFS SSI without it (but not continued).

You, Solid experts, of course know about these developments. I am only familiar with these as a potential user of this technology, without deep technical knowledge. We have an ongoing forum discussion where I mention (from the top of my head) potential benefits and use cases of this kind of ‘Web-of-Trust’ (and may not have used the proper terminology). Solid was mentioned too. You may find it interesting:

> **[Investigating privacy-respecting online identity, data ownership &...](https://community.humanetech.com/t/investigating-privacy-respecting-online-identity-data-ownership-control-solutions/3089/10?u=aschrijver)**
>
> It depends on what you see as a profile. On any platform where you are not wholly anonymous there is the need to store some information about you, if only your username and/or IP address, email for password recovery, etc. (Note: A fully anonymous...

I would be curious to know how Solid relates to all this.

(PS, Send me a PM if this last subject should be a separate topic)
