Was only .bch. The daemon and CA already handle these four TLDs; the NRPT
rule was the missing piece that made .p2p / .bit / .nav queries never reach
the daemon at all (they went to ICANN's normal DNS and NXDOMAIN'd).
Dual TLDs (.de .ru .dev .ltd) intentionally NOT here. They need the
daemon's DNS-forwarding path to work reliably for unregistered names,
and there's still an open EDNS/AAAA forwarding bug in bnsd.js that
would break most German/Russian sites if we NRPT'd .de.
Adding more native TLDs (.x .sia .dgb .nt from Theseus's expanded set)
needs a CA rotation first — the current CA's nameConstraints only permit
bch/p2p/bit/deviant/nav/test/bcnr. Deferred.
- Security popover redesigned to resemble Firefox's site-info panel:
lock/shield hero, "Connection secure" status, host, plain-language
subtitle, and a details grid; the overlay view auto-sizes to content.
- Search-engine picker returned to the toolbar with an "Add / edit engines…"
entry that opens Settings; added Ecosia, Mojeek, Presearch.
- Custom search engines: add (name + URL template with %s) / remove in
Settings > General; used by address-bar search.
- Address-bar placeholder: "Ask a search engine or enter web address".
The chooser page was two audience-labelled panels ("For people" / "For
developers"). Rebuild as two acts of two pills each, describing the systems
rather than the reader: the web you browse (stay / step outside), the web you
build on (rent / own). The paid name+hosting service gains a name here —
Sirius.x — and it appears on the developer red pill and its destination.
The privacy claim tightens across all three pages to the version that is
actually true: anonymous by default, not by exception.
- The default path binds a domain to a verified legal identity via WHOIS/RDAP,
ICANN accreditation, and the card. Privacy-forward registrars (Njalla,
MyNymBox) exist and behave well; paired with Tor/VPN they give genuine
real-world privacy. But they hold the identity ON YOUR BEHALF and can be
compelled to produce it. A bank card undoes any of it.
- Sirius.x has no card support and no account, so there is nothing to compel
out of a provider that never held it.
- Honestly noted on the red side that no stack removes your IP — the network
layer (Tor/VPN) is a separate question. Two independent questions, two
independent answers.
Also: /register.html#hosting was a dead anchor; fix in a follow-up commit.
Third-party sessions are concurrently editing TheseusNavigator/; not touched here.
- Performance: cache the chain index (was rebuilt on every navigation) and
warm it at startup — .bch pages open near-instantly after the first.
- Loading indicator: indeterminate bar under the toolbar, per-tab spinner,
and reload⇄stop button (driven by did-start/stop-loading + BNS resolve).
- Chrome cleanup: removed the bottom status bar and the redundant search
box; security padlock now always present at the front of the address bar;
minimal ICANN/BCNR pill at the end; favorites bar shows only on new-tab.
- Search: added Yandex; engine picker moved into Settings > General.
- Settings redesigned with a left sidebar (General / Performance / Privacy /
Anti-fingerprinting). Anti-fingerprinting now Show/Hide/Spoof/Manual for
timezone, language, AND location (geolocation coords overridden in-page).
