Oddbean new post about | logout
 In terms of privacy, I agree, it doesn’t make sense for it to be on the list. But DNS is very centralized, with one entity (ICANN) overseeing the entire root. There’s no way to truly own a name on the internet, you can only rent it. I used to be entirely against the current system, but now I see some scenarios where a centralized DNS makes sense, like in name collisions, squatting, faking identity, etc. Don’t get me wrong, I’d love a decentralized alternative to DNS (for example Handshake), but it would be wrong to ignore the shortcomings of decentralized DNS. And DNS and web security are very closely tied, with CAs only granting certs to ICANN domains (or ip addresses but that defeats the convenience of DNS), which means your devices have no way to “trust” a service without an ICANN domain. DANE + DNSSEC could fix this, but no browsers support it.