💾 Archived View for nicholasjohnson.ch › 2022 › 09 › 07 › icannot-be-trusted captured on 2023-11-04 at 11:38:39. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

 _  _ _    _        _              _     _                      
| \| (_)__| |_  ___| |__ _ ___  _ | |___| |_  _ _  ___ ___ _ _  
| .` | / _| ' \/ _ \ / _` (_-< | || / _ \ ' \| ' \(_-</ _ \ ' \ 
|_|\_|_\__|_||_\___/_\__,_/__/  \__/\___/_||_|_||_/__/\___/_||_|

📆 September 7, 2022 | ⏱️ 2 minutes read | 🏷️ computing

ICANNot Be Trusted

ICANN

The Internet Corporation for Assigned Names and Numbers, also known as ICANN¹, is a U.S. nonprofit which manages the DNS² root servers. When you type "nicholasjohnson.ch" into your search bar and hit enter, ICANN is ultimately in control over what happens next, not me.

ICANN's contracts with domain registries are immune from being challenged and registries can set arbitrary restrictions on content hosted on their domains. ICANN has an effective monopoly on almost all domain names and punishes people for past sharing.³ For more on that, see the article "Ending the War on Sharing⁴".

Another problem I have with ICANN is one can't legally own a domain name without forking over personal information to the domain name registrar. Most registrars offer to hide that information from public view, but they still have to hand it over under certain circumstances and there's always the possibility that it gets stolen.

To get around that, nicholasjohnson.ch is currently registered through Njalla⁵. Njalla legally owns nicholasjohnson.ch and all its subdomains and in return, I don't have to fork over any personal information. They've been operating for years, but could still run away with my domain name and I'd have no recourse since they legally own it.

Tor and I2P

Ideally, you're accessing this journal over⁶ Tor⁷ or⁸ I2P⁹. Those networks will continue working even if my domain gets hijacked. It's unlikely that something happens to my domain, but it's not impossible.

My Tor onion and I2P addresses aren't foolproof. They're hosted on a VPS, meaning my VPS provider could hijack them. Using nicholasjohnson.ch to access my journal, you have to trust both ICANN and my VPS though. So you're better off using Tor or I2P so you only need to trust one third party, not two.

Brief digression: To avoid trusting any third party, you can always verify my journal's Git repository¹⁰ with my public Signify key¹¹ and a small utility called git-signify¹². If there's any doubt the key is mine, I gave a Libreplanet talk¹³ with my public key in the slides five months ago and I have an unbroken history of public keys going back to December of 2020 starting with my original GPG key¹⁴ which I transitioned away from.

If you yourself are an online service provider, please follow my example and offer a Tor onion and/or I2P address to help resist ICANN's power.

References

🔗 [1]: ICANN

🔗 [2]: DNS

🔗 [3]: ICANN has an effective monopoly on almost all domain names and punishes people for past sharing.

🔗 [4]: Ending the War on Sharing

🔗 [10]: verify my journal's Git repository

🔗 [11]: my public Signify key

🔗 [12]: git-signify

🔗 [13]: Libreplanet talk

🔗 [14]: GPG key