8904c1d7ba
Other browsers stopped opening most BNS names because two lists had drifted. The installer took its TLD set from the gateway's `advertised` field — the legacy tlds.bch record, nine TLDs — while the registry had moved to per-TLD NFTs with twenty (including .x, where most Silent Mode sites live). And the daemon's permitted-TLD list came from the bundled ariadne.config.json (seven TLDs) rather than the CA the installer had just minted, so only the overlap — .bch, .p2p, .deviant, .nav — actually worked; .sia, .nt and the rest got no certificate, .x got no route at all. Now: the gateway publishes `routable` (every live TLD on the public listing plus the legacy advertised set); the installer routes and certifies that, skipping ICANN-delegated collision TLDs (.cash, .gt, .sc — checked against the live IANA root zone, bundled snapshot as fallback) since the local CA must never be constrained to a real internet TLD; it writes the certified list into ariadne.config.json; and the daemon reads its permitted list from the installed CA's own name constraints, so the two can no longer disagree. |
||
|---|---|---|
| .. | ||
| iana-tlds.txt | ||
| install.ps1 | ||
| uninstall.ps1 | ||