Paul Jolly @myitcv.io · 13/02/2024Would there be some way when proving you own a domain you can also include some kind of kill switch, that allows you to revoke the ability to publish future versions under that module path (when you lose control to a new owner)? 100
Filippo Valsorda @filippo.abyssdomain.expert · 13/02/2024We could definitely design one, but would people actually use it? Hold on to the revocation keys for when they need them? And it’s also an abuse vector from past maintainers if there’s no way to defuse it, but a way to defuse it would defeat the point. 210
Paul Jolly @myitcv.io · 13/02/2024Let me start by confessing that my understanding/experience in this space is far far less than yours and other experts so my question is humbly asked in that regard :) > it's also an abuse vector from past maintainers Is this not less of a practical concern than someone squatting the domain? 100
Natanael, Tech janitor @natanael.bsky.social · 13/02/2024I could imagine DNSSEC-DANE plus a transparency log which also tracks ownership changes, but it seems unlikely to see widespread use 100
