1. Generate keys
The holder generates a private key and public key. The private key signs records; the public key enables verification.
Independent technical-legal proposal
Domains based on cryptographic identity, multiple locators and transparency logs.
In I5NS, a domain does not originate from permission by a central registrar. It originates from a cryptographic identity capable of signing names, routes, locators and updates.
The core rule is simple: the cryptographic identity is the real domain; the human-readable name is a verifiable alias.
human-readable name → cryptographic identity → multiple verifiable locators internet5.i5 ↓ i5id:ed25519:z6Mkp... ↓ https://alexfernando.com/internet5.0/ ipfs://... onion://... mirror://...
The holder generates a private key and public key. The private key signs records; the public key enables verification.
The record contains name, i5id, locators, validity, recovery policy and signature.
The record may be published through .well-known, DNS TXT, IPFS, transparency logs and mirrors.
The holder may prove control of a traditional domain, GitHub, Nostr, organization or other source, without making it mandatory.
m-of-n recovery prevents permanent loss if the primary key is lost.
Clients consult records, logs and configurable trust lists without a single central authority.