Summary: Beyond DNS – Decentralized Naming on Cardano with cDNSd
In this edition of the Developers Office Hour, the host speaks with Chris Gianelloni, CEO of Blink Labs, about cDNSd and the future of decentralized naming. The session explores the structural limitations of the traditional Domain Name System (DNS) and how Cardano can power a transparent, censorship-resistant alternative.
The Problem: Centralized Internet Control
Traditional DNS behaves like the global phone book for the internet, translating domain names into server IP addresses. However, this system relies on a hierarchical authority overseen by ICANN, an international consortium that acts as the sole gatekeeper for top level domains (TLDs) like .com or .org. This centralized structure is highly bureaucratic; for example, the Cardano Foundation’s application for the .ada TLD required a grueling 400-page document. This centralization creates a significant bottleneck for Web3, as domain registries can be shut down, seized, or censored by centralized entities or nation-states.
The Solution: Merging Handshake and Cardano
To bypass ICANN, a decentralized blockchain called Handshake was created as a fork of Bitcoin, dedicated entirely to trustlessly managing TLD ownership through on-chain cryptographic authority and auctions. While Handshake is purpose-built for TLDs, it lacks smart contracts to manage second level domains (SLDs). To bridge this gap, Blink Labs developed two Project Catalyst proposals: a decentralized DNS registry powered by Cardano smart contracts and a lightweight DNS server. Using this framework, Handshake TLD owners can cryptographically prove their ownership on Cardano to safely manage and sell SLDs directly on-chain.
cDNSd: A Lightweight, Pluggable Resolver
Blink Labs built cDNSd, a highly efficient DNS server written in Go. The binary is extremely small (around 16 megabytes) and runs in only a few megabytes of RAM, allowing it to be compiled into WebAssembly (WASM) and embedded directly into web applications, wallets, or home routers. Rather than reading from a centralized API, cDNSd reads the Cardano DNS standard directly from on-chain smart contracts and indexes the records locally.
The server operates as a multi-root resolver, indexing Cardano on-chain data, natively supporting Handshake TLDs, and falling back to ICANN for traditional domains. It includes a top-level controller contract for TLD discovery, and each TLD can have its own customized SLD rules. Additionally, operators can choose to redelegate specific subdomains back to off-chain cloud providers like AWS or Google for dynamic DNS.
The Roadmap for .ada Domains
Blink Labs is actively collaborating with the Handshake owner of the .ada domain—which was secured on Handshake long before the Cardano Foundation’s ICANN application—to merge both roots. Once ICANN certifies the .ada TLD, the Cardano Foundation will hold custody of the on-chain registry contracts. This will enable the community to buy .ada domains that resolve natively in standard browsers, using Cardano’s ledger as the underlying, authoritative database.
Top Five Q&A (FAQ) about cDNSd and Decentralized Naming
Question 1: What is cDNSd and what is its main goal?
Answer: Developed by Blink Labs, cDNSd is a lightweight, high-performance DNS server written in Go. Its main goal is to decentralize the internet’s naming infrastructure by allowing developers to store, index, and resolve DNS records directly from the Cardano blockchain, bypassing the centralized gatekeepers of the traditional web.
Question 2: How does cDNSd achieve compatibility between traditional and decentralized naming systems?
Answer: The cDNSd server acts as a single resolver with built-in fallback mechanics. It first attempts to resolve names using Cardano on-chain DNS records, then falls back to the decentralized Handshake blockchain for top level domains, and finally queries traditional ICANN root servers for standard domains, providing complete cross-system interoperability.
Question 3: Why is Handshake used alongside Cardano in this project?
Answer: Handshake is a proof-of-work blockchain designed specifically to manage top level domain (TLD) auctions and ownership cryptographically, replacing ICANN’s centralized registry. Instead of duplicating this TLD auction system, Blink Labs uses Cardano smart contracts to manage second level domains (SLDs) for those TLDs, leveraging Handshake’s robust, existing root of trust.
Question 4: What is the current challenge regarding SSL/TLS certificates for decentralized domains, and how is it addressed?
Answer: Traditional browsers and certificate authorities do not natively trust Handshake domains because their rules are strictly tied to ICANN’s root of trust. Currently, users must run local proxies like DANE or SANE to locally generate and trust certificates. To address this, Blink Labs is working to embed cDNSd (via WebAssembly) directly into Cardano wallets, allowing applications to bypass the operating system’s DNS and resolve on-chain names securely.
Question 5: How will the future .ada top level domain function?
Answer: Blink Labs is coordinating with the Handshake owner of .ada and the Cardano Foundation to merge the ICANN and Handshake roots. Once ICANN approves the .ada domain, the Cardano Foundation will manage the authoritative smart contracts on Cardano, allowing users to purchase .ada domains that are recorded on-chain and resolve natively in any standard browser.