Terence Eden. He has a beard and is smiling.

Terence Eden’s Blog

Theme Switcher:

Preventing NAPTR Spam

· 4 comments · 900 words · Viewed ~753 times


Glowing computer text showing dot com dot info etc.

You're the sort of cool nerd who knows all the weird esoterica which makes up DNS, right? In amongst your A, AAAA, SOA, and MX records, there's a little used NAPTR. Yes, you can use DNS to store Name Authority Pointers! What?! It is yet another of those baroque standards which spits out things like: cid.uri.arpa. ;; order pref flags service regexp replacement IN NAPTR…

Get the location of the ISS using DNS

· 14 comments · 550 words · Viewed ~40,193 times


The International Space Station floats above the planet Earth.

I love DNS esoterica. Weird little things that you can shove in the global directory to be distributed around the world instantly(ish). Domain names, like www.example.com usually resolve to servers. As much as we think of "the cloud" as being some intangible morass of ethereal Turing-machines floating in probability space, the more prosaic reality is that they're just boxen in data centres. They …

How to prevent Payment Pointer fraud

· 9 comments · 1,000 words · Viewed ~705 times


Web Monetization The Web Monetization API allows websites to automatically and passively receive payments from Web Monetization-enabled visitors.

There's a new Web Standard in town! Meet WebMonetization - it aims to be a low effort way to help users passively pay website owners. The pitch is simple. A website owner places a single new line in their HTML's <head> - something like this: <link rel="monetization" href="https://wallet.example.com/edent" /> That address is a "Payment Pointer". As a user browses the web, their browser takes …

Getting lots of BIMI images using Python

· 650 words · Viewed ~231 times


Glowing computer text showing dot com dot info etc.

I've written before about the moribund BIMI specification. It's a way for brands to include a trusted logo when they send emails. It isn't much used and, apparently, is riddled with security issues. I thought it might be fun to grab all the BIMI images from the most popular websites, so I can potentially use them in my SuperTinyIcons project. BIMI images are SVGs. Links to a site's BIMI are…

A quick look inside the HSTS file

· 3 comments · 450 words · Viewed ~910 times


Glowing computer text showing dot com dot info etc.

You type in to your browser's address bar example.com and it automatically redirects you to the https:// version. How does your browser know that it needed to request the more secure version of a website? The answer is... A big list. The HTTP Strict Transport Security (HSTS) list is a list of domain names which have told Google that they always want their website served over https. If the user …

Konami Code Domain Name

· 5 comments · 150 words · Viewed ~366 times


Glowing computer text showing dot com dot info etc.

More on my experiments with silly Punycode domain names. http://↑↑↓↓←→←→ba.tk/ Yup, copy and paste that into your browser and it will resolve. (more…) …

Naming things is hard - DNS for the Federated Web

· 5 comments · 500 words · Viewed ~360 times


The multicoloured interlocking lines of the Fediverse logo.

How should I design my personal DNS for all the cool new Federated Services and IndieWeb protocols? Way back in the early 2000s, I started this website - shkspr.mobi. A few years later, I added a blog. I could have used the main domain, or created a subdomain like blog.shkspr.mobi. In the end, I chose a subdirectory of shkspr.mobi/blog I don't know if that was the right choice back then, but…

Some more silly Punycode domain names

· 8 comments · 550 words · Viewed ~698 times


The logo for the band Spinal Tap. The logo looks like it has been chiselled out of heavy metal by virgin nuns who only wish to please the gods of rock and roll.

You know how it is, you buy one silly domain name and then you get an idea for loads more! A few weeks ago, I got https://⏻.ga/ - I think I'm the first person to get a domain name which uses a glyph from the Miscellaneous Symbols Unicode block. How exciting! And that got me wondering… what other abuses of the Punycode algorithm can I whack into DNS? Well, here's some I whipped up using FreeNom …

What's the cheapest domain you can register for 10 years?

· 13 comments · 450 words · Viewed ~17,592 times


Screenshot showing £12.80 for 10 years.

I'm concerned about the longevity of the domains I register. I want my domains to be available for as long as possible. But it seems that every year prices rise - and the discount often provided for a new domain rarely continues into subsequent years. So I recently started renewing them for as long as possible. It turns out that most domains can be registered for a maximum of 10 years. A…

DNS Esoterica: BIMI - SVG in DNS TXT WTF?!

· 4 comments · 750 words · Viewed ~1,448 times


Screenshot of an email.

You've been on the Internet a long time, right? Of course you know what BIMI is. All the cool kids do. But, for those of you who aren't hip to the jive of the Infobahn... BIMI (Brand Indicators for Message Identification) is a new standard that can curb the issue of online impersonators. ... BIMI is a new standard that enables you to include your company’s logo alongside the emails you send. T…

DNS Esoterica - Why you can't dig Switzerland

· 23 comments · 100 words · Viewed ~35,743 times


Glowing computer text showing dot com dot info etc.

As part of my new job, I'm learning a lot more about the mysteries of the Domain Name System than any mortal should know I thought possible. The humble unix dig command allows you to query all sort of DNS information. For example, to see name server records for the BBC website, you can run: dig bbc.co.uk NS Which will get you: ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: …

🔥.me.ss! You can't register emoji domains in South Sudan

· 4 comments · 500 words · Viewed ~318 times


Dear Terence, We have contacted the registry and they said they don't allow 2 successive dashes.

It's useful to share negative results. Not every experiment has an amazing or successful outcome. tl;dr you can't register Punycode .ss domains. This also means Internet users in South Sudan can't register domains using their own writing system. Background The Republic of South Sudan became independent and joined the United Nations back in 2011. A decade later, and it's now possible to…