Post by @phlash@mastodon.me.uk
At the core of the global internet are the DNS root servers. These 13 go-to places are at the top of authority when it comes to making sure you can connect to any server with a domain name. What you might not know is that 10 of these 13 root servers are ultimately under US jurisdiction. Should that worry you? I guess not, the current system is quite robust. But I deal in risk assessment and probabilities. And I think this isn't an ideal setup.
🍵
@jwildeboer
Is there any research on creating a more federated, byzantine emperor tolerant dns root structure?
See also PKI root certificate lists and who authorises changes to them (Mozilla, Microsoft, Apple and various Linux distros, primarily Debian)...
@phlash Ah, the root certificates collection. Another point of centralisation. Though mostly focused on browsers, less on operating systems, where (for now) you can add your own root certificates, even on iOS and Android. It's a complex issue. And better solutions come from understanding how the current system works. That's the discussion I hope to fire up :)