Similar to If/when will LE support .onion addresses? it’d be great to be able to issue certs for .bit domains, where domain registration and renewal happens on the Namecoin blockchain. Maybe you had conversations about this too already?

As with .onion, this may need an RFC establishing that .bit is reserved for this purpose, so that there won’t be ambiguity about what a .bit name means (for example, due to ICANN issuing it as a future DNS gTLD). People working on Let’s Encrypt appreciate the potential value of non-DNS name resolut…

By the way, when I said [image] schoen: browser vendors are quite cautious about saying that certs from browser-trusted CAs should only be issued when the meaning of the subject name in the cert is clearly established I mean that the browser vendors do say this, not that they're reluctant to…

@schoen Makes sense, of course. Thanks for your detailed response! If anyone stumbling upon this thread has links to specific discussions being led online at these bodies, it’d be fantastic if you could post those.

Alec Muffet just said that the .onion RFC is about to be approved over at IETF. https://datatracker.ietf.org/doc/draft-ietf-dnsop-onion-tld/ballot/ (It just passed the IESG review.) It seems like there’s still not clear agreement within IETF about what procedure should be followed for doing thing…

Not just .bit or .onion domains, but a plethora of ‘new’ / ‘alternative’ TLD’s, generally inaccessible via the clearnet could be supported i.e. Emercoin - .emc, .coin, .lib, .bazar - http://emercoin.com/EMCDNS_and_NVS Namecoin - .bit New Nations - .uu, .ti, .te, .ku Open NIC - .bbs, .dyn, .free,…

@emerproxy , if you’re supporting these names by having people use a proxy, they can reach that proxy over the clearnet (or even run it locally on their own computers, which would be a lot safer). We don’t specifically need .onion certs for that, and, as I’ve mentioned elsewhere, we’re not able to di…

[image] emerproxy: Open NIC - .bbs, .dyn, .free, .fur, .geek, .gopher, .indy, .ing, .micro, .neo, .null, .oss, .oz, .parody About OpenNIC there was already a separate thread: [image] Do you support OpenNIC top level domains? Issuance Policy R…

Namecoin/DNSChain/.bit support

Feature Requests

rugk December 11, 2015, 10:43pm 8

About OpenNIC there was already a separate thread:

Topic		Replies	Views
If/when will LE support .onion addresses? Feature Requests	96	30157	January 3, 2021
Letsencrypt for .onion? Issuance Policy	29	19808	July 6, 2022
.onion domain support Feature Requests	1	6288	June 12, 2017
Certificate for onion v3 address Issuance Policy	10	3591	March 14, 2025
Do you support OpenNIC top level domains? Issuance Policy	7	7700	June 13, 2017

Namecoin/DNSChain/.bit support

Related topics