{ "version": "https://jsonfeed.org/version/1.1", "title": "darknetian", "home_page_url": "https://www.darknetian.com/", "feed_url": "https://www.darknetian.com/feed.json", "description": "Technical writing on DNS, security, observability, and agent infrastructure.", "language": "en-us", "authors": [ { "name": "Nic Williams", "url": "https://www.darknetian.com/about/" } ], "items": [ { "id": "https://www.darknetian.com/posts/2026-06-03-agent-identity-without-a-new-authority/", "url": "https://www.darknetian.com/posts/2026-06-03-agent-identity-without-a-new-authority/", "title": "Agent Identity Without a New Authority — Digital Wallets and the SAN", "date_published": "2026-06-03T00:00:00.000Z", "tags": ["dns-aid","ans","digital identity","itu","opendid","mdl","ai agents"], "summary": "Republic of Korea's OpenDID and France's mDL ship a TPM-anchored credential flow. DNS-AID and ANS can ride that substrate without inventing a new registry, central root, or hardware-wallet assumption with some tinkering." }, { "id": "https://www.darknetian.com/posts/2026-05-25-syslog-to-dnstap/", "url": "https://www.darknetian.com/posts/2026-05-25-syslog-to-dnstap/", "title": "Over-Engineering Homelab Syslog Receiving With DNSTAP", "date_published": "2026-05-25T00:00:00.000Z", "tags": ["infoblox","nios","dnstap","graylog","dns","homelab","telemetry"], "summary": "Changing per-query DNS telemetry from syslog forwarding to a DNSTAP pipeline, and what the syslog path actually does on the appliance." }, { "id": "https://www.darknetian.com/posts/2026-05-22-morpheus-liberates-agents/", "url": "https://www.darknetian.com/posts/2026-05-22-morpheus-liberates-agents/", "title": "Auditing the Agent Internet — Agents Grading Agents", "date_published": "2026-05-22T00:00:00.000Z", "tags": ["dns-aid","ai agents","morpheus","dnssec","dane","cloudflare","anthropic","mcp","a2a","sse"], "summary": "A read-only auditor for the open agent web. It walks any domain's substrate — DNS-AID, AgentFinder, AI-Catalog, DID Web, TLSA, DNSSEC — and provides a grade based on ease of other agents finding and interacting with it." }, { "id": "https://www.darknetian.com/posts/2026-05-20-bookings-goes-real/", "url": "https://www.darknetian.com/posts/2026-05-20-bookings-goes-real/", "title": "Bookings Goes Real — Cloudflare Workers, Claude Managed Agents, and DNS-AID Glue", "date_published": "2026-05-20T00:00:00.000Z", "tags": ["dns-aid","ai agents","cloudflare","anthropic","mcp","a2a","ans","agent cards"], "summary": "The first of the five fake agents now answers real requests. Three protocol surfaces, one Anthropic-managed Claude underneath, and DNS-AID + ANS attesting to all of it end-to-end." }, { "id": "https://www.darknetian.com/posts/2026-05-18-agentfinder/", "url": "https://www.darknetian.com/posts/2026-05-18-agentfinder/", "title": "AgentFinder — Federation, Semantic Search, and the DNS Gesture", "date_published": "2026-05-18T00:00:00.000Z", "tags": ["dns-aid","ai agents","agentfinder","ai-catalog","federation","semantic search"], "summary": "AgentFinder adds representativeQueries and a /search federation API on top of ai-catalog. Its DNS-SVCB gesture is exactly what DNS-AID specifies. They should know about each other." }, { "id": "https://www.darknetian.com/posts/2026-05-17-ctem-spiderweb/", "url": "https://www.darknetian.com/posts/2026-05-17-ctem-spiderweb/", "title": "Wiring the CTEM Spiderweb", "date_published": "2026-05-17T00:00:00.000Z", "tags": ["easm","ctem","graylog","security","homelab"], "summary": "A pipeline that unifies Infoblox CTEM, lookalike-domain monitoring, brand protection, and open-source attack-surface signals into one Graylog dashboard — keyed by finding name, deduped across sources, and tagged with bug-bounty eligibility." }, { "id": "https://www.darknetian.com/posts/2026-05-16-ai-catalog/", "url": "https://www.darknetian.com/posts/2026-05-16-ai-catalog/", "title": "ai-catalog — One URL, Many Protocols", "date_published": "2026-05-16T00:00:00.000Z", "tags": ["dns-aid","ai agents","ai-catalog","agent cards","multi-protocol"], "summary": "A single /.well-known/ai-catalog.json enumerates every protocol surface an agent exposes — A2A, MCP, HTTPS — under one endpoint. The wrapping is the load-bearing idea." }, { "id": "https://www.darknetian.com/posts/2026-05-15-the-thing-the-index-points-to/", "url": "https://www.darknetian.com/posts/2026-05-15-the-thing-the-index-points-to/", "title": "The Thing the Index Points To", "date_published": "2026-05-15T00:00:00.000Z", "tags": ["dns","dns-aid","ai agents","transparency log","ans","azure","cloudflare"], "summary": "DNS-AID's path-2 index leaf names a registry the draft explicitly leaves out of scope. Wiring ANS — a registration authority plus transparency log — to be that registry." }, { "id": "https://www.darknetian.com/posts/2026-05-14-five-fake-agents-real-dns/", "url": "https://www.darknetian.com/posts/2026-05-14-five-fake-agents-real-dns/", "title": "Five Fake Agents on a Real Cloudflare Zone", "date_published": "2026-05-14T00:00:00.000Z", "tags": ["dns","dns-aid","ai agents","cloudflare","dane","hot rfc"], "summary": "Publishing 5 DNS-AID agent records to darknetian.com — flat primary plus walkable AliasMode, DANE TLSA from throwaway self-signed certs, all DNSSEC-signed end-to-end. No agents actually exist behind any of them." }, { "id": "https://www.darknetian.com/posts/2026-05-13-agent-cards/", "url": "https://www.darknetian.com/posts/2026-05-13-agent-cards/", "title": "Agent Cards — The Well-Known JSON", "date_published": "2026-05-13T00:00:00.000Z", "tags": ["dns-aid","ai agents","agent cards","well-known","identity"], "summary": "agent-card.github.io standardizes how an agent describes itself at /.well-known/. DNS-AID resolves names; agent cards describe what answers at those names." }, { "id": "https://www.darknetian.com/posts/2026-05-12-edns-agent-hint/", "url": "https://www.darknetian.com/posts/2026-05-12-edns-agent-hint/", "title": "EDNS(0) for Agent Discovery — Letting the Client Tell the Resolver What It's Looking For", "date_published": "2026-05-12T00:00:00.000Z", "tags": ["dns","dns-aid","ai agents","infoblox","edns","hot rfc"], "summary": "An experimental EDNS(0) option for DNS-AID that lets a client signal selector filters on the query so any hint-aware hop can narrow the answer or short-circuit with a cached match." }, { "id": "https://www.darknetian.com/project/2026-05-12-dns-aid/", "url": "https://www.darknetian.com/project/2026-05-12-dns-aid/", "title": "DNS-AID — DNS-based Agent Identification and Discovery", "date_published": "2026-05-12T00:00:00.000Z", "tags": ["ai research","hot rfc","dns","dns-aid","infoblox","ops"], "summary": "An IETF draft + open-source reference implementation that lets AI agents discover each other through the internet's existing naming substrate instead of through a new central registry." }, { "id": "https://www.darknetian.com/posts/2026-05-10-reef/", "url": "https://www.darknetian.com/posts/2026-05-10-reef/", "title": "REEF — When the Agent Holds the Pen", "date_published": "2026-05-10T00:00:00.000Z", "tags": ["dns","ai agents","infoblox","ops"], "summary": "An agent loop that reads, reasons, and (with your permission) edits Infoblox Threat Defense policy. Runs against any LLM you point it at — including a 4GB GPU in your homelab." }, { "id": "https://www.darknetian.com/posts/2026-05-08-dns-aid-dcv/", "url": "https://www.darknetian.com/posts/2026-05-08-dns-aid-dcv/", "title": "DCV — Proving an Agent Belongs to a Domain Without a Central Authority", "date_published": "2026-05-08T00:00:00.000Z", "tags": ["dns","dns-aid","ai agents","infoblox","security"], "summary": "A stateless challenge/response primitive over TXT records that lets a NAT'd agent prove zone control without registering with anyone." }, { "id": "https://www.darknetian.com/posts/2026-05-07-graylog-deepened/", "url": "https://www.darknetian.com/posts/2026-05-07-graylog-deepened/", "title": "Graylog Enrichment, Deepened", "date_published": "2026-05-07T00:00:00.000Z", "tags": ["graylog","infoblox","siem","homelab"], "summary": "Adding MAC→DHCP-hostname lookups, dashboards-as-code, and the long tail of NIOS WAPI and OpenSearch quirks the first pass left behind." }, { "id": "https://www.darknetian.com/posts/2026-01-18-experimental-rr/", "url": "https://www.darknetian.com/posts/2026-01-18-experimental-rr/", "title": "Creating a New DNS Resource Record Type", "date_published": "2026-01-18T00:00:00.000Z", "tags": ["dns","dns-aid","ai research","ops"], "summary": "Why it may be beneficial to think about DNS in a new way." }, { "id": "https://www.darknetian.com/project/2026-01-17-ai-discovery/", "url": "https://www.darknetian.com/project/2026-01-17-ai-discovery/", "title": "Agentic AI Discovery", "date_published": "2026-01-17T00:00:00.000Z", "tags": ["ai research","hot rfc","dns","dns-aid","ops"], "summary": "The fight for an open web continues." }, { "id": "https://www.darknetian.com/project/2026-01-16-automate-customer-activity/", "url": "https://www.darknetian.com/project/2026-01-16-automate-customer-activity/", "title": "Automated Activity Tracking", "date_published": "2026-01-16T00:00:00.000Z", "tags": ["automation","salesforce","microsoft","powerautomate"], "summary": "Reducing the opportunity cost of high-fidelity logging." }, { "id": "https://www.darknetian.com/project/2026-01-15-identifying-health-checks/", "url": "https://www.darknetian.com/project/2026-01-15-identifying-health-checks/", "title": "Identifying Health Checks", "date_published": "2026-01-15T00:00:00.000Z", "tags": ["automation","duct tape special"], "summary": "A framework to prioritize customer health checks." }, { "id": "https://www.darknetian.com/project/2026-01-14-workstream-automation/", "url": "https://www.darknetian.com/project/2026-01-14-workstream-automation/", "title": "Workstream Automation", "date_published": "2026-01-14T00:00:00.000Z", "tags": ["automation"], "summary": "Rapidly decrease time-to-quote and increase time-to-value of technical sellers." } ] }