thejohnnycrypto on Nostr: codonaft what does the resolver trust? if anyone can run one, the client still has to ...

codonaft (nprofile…jys9) what does the resolver trust? if anyone can run one, the client still has to check the record was signed by the npub that held _@domain before the takedown, otherwise you swapped the registrar for whoever runs the nameserver. the self signed cert path in the native clients is the piece you can ship without asking permission.