Was only .bch. The daemon and CA already handle these four TLDs; the NRPT
rule was the missing piece that made .p2p / .bit / .nav queries never reach
the daemon at all (they went to ICANN's normal DNS and NXDOMAIN'd).
Dual TLDs (.de .ru .dev .ltd) intentionally NOT here. They need the
daemon's DNS-forwarding path to work reliably for unregistered names,
and there's still an open EDNS/AAAA forwarding bug in bnsd.js that
would break most German/Russian sites if we NRPT'd .de.
Adding more native TLDs (.x .sia .dgb .nt from Theseus's expanded set)
needs a CA rotation first — the current CA's nameConstraints only permit
bch/p2p/bit/deviant/nav/test/bcnr. Deferred.
The chooser page was two audience-labelled panels ("For people" / "For
developers"). Rebuild as two acts of two pills each, describing the systems
rather than the reader: the web you browse (stay / step outside), the web you
build on (rent / own). The paid name+hosting service gains a name here —
Sirius.x — and it appears on the developer red pill and its destination.
The privacy claim tightens across all three pages to the version that is
actually true: anonymous by default, not by exception.
- The default path binds a domain to a verified legal identity via WHOIS/RDAP,
ICANN accreditation, and the card. Privacy-forward registrars (Njalla,
MyNymBox) exist and behave well; paired with Tor/VPN they give genuine
real-world privacy. But they hold the identity ON YOUR BEHALF and can be
compelled to produce it. A bank card undoes any of it.
- Sirius.x has no card support and no account, so there is nothing to compel
out of a provider that never held it.
- Honestly noted on the red side that no stack removes your IP — the network
layer (Tor/VPN) is a separate question. Two independent questions, two
independent answers.
Also: /register.html#hosting was a dead anchor; fix in a follow-up commit.
Third-party sessions are concurrently editing TheseusNavigator/; not touched here.
- Performance: cache the chain index (was rebuilt on every navigation) and
warm it at startup — .bch pages open near-instantly after the first.
- Loading indicator: indeterminate bar under the toolbar, per-tab spinner,
and reload⇄stop button (driven by did-start/stop-loading + BNS resolve).
- Chrome cleanup: removed the bottom status bar and the redundant search
box; security padlock now always present at the front of the address bar;
minimal ICANN/BCNR pill at the end; favorites bar shows only on new-tab.
- Search: added Yandex; engine picker moved into Settings > General.
- Settings redesigned with a left sidebar (General / Performance / Privacy /
Anti-fingerprinting). Anti-fingerprinting now Show/Hide/Spoof/Manual for
timezone, language, AND location (geolocation coords overridden in-page).
