Post #3241188

@davew@mastodon.social @mike@flipboard.social DNS is not an id system for individuals. trust anchors in DNS work insofar as proving control in a distributed way. acme dns-01 a good example. But you’re not proving ID, just control. So trust starts with implied but unprovable Id despite the efforts of IP lawyers & ICANN hangers on, Whois data is neither widely accessible nor particularly accurate. I personally use rfc7929 entries, but gpg lifecycle management is beyond ordinary user capabilities