RFC 9498: The GNU Name System

[Schanzenbach, Martin]

We are happy to announce that our *The GNU Name System* (GNS)
specification is now published as RFC 9498 [0].

GNS addresses long-standing security [1] and privacy [2] issues in the
ubiquitous Domain Name System (DNS) [3]. Previous attempts to secure DNS
(DNSSEC [4]) fail to address critical security issues [5] such as end-to-end
security, query privacy, censorship, and centralization of root zone
governance. After 40 years of patching, it is time for a new beginning.

The GNU Name System is our contribution towards a decentralized and
censorship-resistant domain name resolution system that provides a
privacy-enhancing alternative to the Domain Name System (DNS).

As part of our work on RFC 9498, we have also contributed to the
specification of the .alt top-level domain [6] to be used by alternative
name resolution systems and have established the GANA registry for
".alt" [7].

GNS is implemented according to RFC 9498 in GNUnet 0.20.0. It is also
implemented as part of GNUnet-Go [8].

We thank all reviewers for their comments. In particular, we thank D. J.
Bernstein, S. Bortzmeyer, A. Farrel, E. Lear, and R. Salz for their
insightful and detailed technical reviews. We thank J. Yao and J.
Klensin for the internationalization reviews. We thank Dr. J. Appelbaum
for suggesting the name "GNU Name System" and Dr. Richard Stallman for
approving its use. We thank T. Lange and M. Wachs for their earlier
contributions to the design and implementation of GNS. We thank J. Yao
and J. Klensin for the internationalization reviews. We thank NLnet [9]
and NGI DISCOVERY [10] for funding work on the GNU Name System.

The work does not stop here: We encourage further implementations of RFC
9498 to learn more both in terms of technical documentation and actual
deployment experiences. Further, we are currently working on the
specification of the R^5N DHT [11] and BFT Set Reconciliation [12] which are
underlying building blocks of GNS in GNUnet and not covered by RFC 9498.

[0]: https://www.rfc-editor.org/rfc/rfc9498.html
[1]: https://www.wired.com/2014/03/quantum/
[2]: https://roarmag.org/essays/nsa-leak-domain-name-system/
[3]: https://www.rfc-editor.org/rfc/rfc882
[4]: https://www.rfc-editor.org/rfc/rfc9364
[5]: https://www.rfc-editor.org/rfc/rfc8324
[6]: https://www.rfc-editor.org/rfc/rfc9476.html
[7]: https://gana.gnunet.org/dot-alt/dot_alt.html
[8]: https://git.gnunet.org/gnunet-go.git/
[9]: https://nlnet.nl
[10]: https://nlnet.nl/project/GNS/
[11]: https://lsd.gnunet.org/lsd0004
[12]: https://lsd.gnunet.org/lsd0003