Hacker News new | ask | show | jobs
by iamnothere 7 days ago
Interesting. Yes, the possibility of direct key lookup would solve the problem, especially if existing contacts remain connected even after name expiration/revocation.

Perhaps you could do a name presale, although I’m not sure that would be enough funding. I look forward to hearing more about it.

1 comments

We'll probably do a name presale, but this is deep tech/big infra we're setting up, so it wouldn't be enough. That's why we're busy partnering with like-minded individuals to do a non-traditional raise. We did start with the more traditional route, but all of them (including a16z) were baffled by our choice to not resort to degenerate behavior (i.e. a16z in particular refused to play game without making a token and listing it on a DEX).

Anyone interested can reach me directly at hn@sepositus.com (this is a SimpleLogin alias to protect my email from spam).

What two properties are you choosing from Zooko’s Triangle? You say human readable and decentralized, so you must be giving up secure.
A few things, Zookos conjecture dates to 2001. It was an observation, not a formal proof of anything, nor a physical limit, as he said in the paper: "I didn't prove that it is impossible to have all three features"

So without conflating Zooko with all the commentators who followed saying, "but Secure meant ...", lets look at the real definition from Zooko:

1. distributed (in the sense that there is no central authority which can control the namespace, which is the same as saying that the namespace spans trust boundaries), 2. secure (in the sense that name lookups cannot be forced to return incorrect values by an attacker, where the definition of "incorrect" is determined by some universal policy of name ownership), 3. and having human-usable keys.

So the system we are building (I am the architect) Satisfies all 3. I went and added a fourth, which is privacy. I say:

4. Private (Whereby a scan of the name registry does not reveal the human readable names).

I think 4 is a necessary property to mitigate CT log like reconnaissance feeds being used by threat actors to enumerate every registered identity for the purpose of automated attacks.