We’ve released ncdns v0.0.9.2. List of changes in v0.0.9.2:

  • All platforms:
    • New build system based on The Tor Project’s rbm. This paves the way for reproducible builds.
    • Add an optional mode to generate_nmc_cert that creates a name-constrained CA cert instead of an end-entity cert. This mode is required for Tor Browser TLS support.
    • Add “URL list” output format to ncdumpzone. This paves the way for a decentralized search engine for Namecoin websites.
    • Make Namecoin RPC timeout configurable. This improves compatibility with Tor Browser.
    • Move x509 to its own repo. This improves compatibility with Tor Browser.
  • Windows:
    • Automatically re-run tlsrestrictnss when NSS is updated; this improves TLS support for Firefox.
    • Upgrade dnssec-keygen to v9.13.3.
  • New projects:
    • DNSSEC-HSTS v0.0.1: A WebExtension that prevents sslstrip attacks for Namecoin websites that support TLS. See my 35C3 slides for more details.
    • ncp11 v0.0.1: Enables Namecoin TLS in browsers that support PKCS#11, such as Tor Browser. See my 35C3 slides for more details.
    • ncprop279 v0.0.1: Enables Namecoin resolution in Tor; somewhat smaller and more efficient than dns-prop279.
  • Code quality improvements.

As usual, you can download it at the Beta Downloads page.

This work was funded by NLnet Foundation’s Internet Hardening Fund and Cyphrs.