[startling]

How do you decide which nameservers to trust about the "ycombinator" domain? What happens if I advertise a nameserver with that domain?

[hackuser]

Use root servers like we do now. I'm not asking about doing away with DNS completely, just TLDs.

[startling]

Got it. Then ICANN (or whoever) controls all websites, and is responsible for their infrastructure. That may or may not be better than what we have.

[th-ai]

If Named Data then no need to trust the server, because trust the data. The data is signed. Signed data is trusted and doesn't care what path it takes to go where it's wanted.

https://en.wikipedia.org/wiki/Named_data_networking

[icebraining]

The same problem holds; what if multiple people sign data under the same namespace? You need some way of mapping a name to a single public key, so that you can check the signature. That's equivalent to a nameserver.