darknetian https://www.darknetian.com/ Technical writing on DNS, security, observability, and agent infrastructure. en-us Agent Identity Without a New Authority — Digital Wallets and the SAN https://www.darknetian.com/posts/2026-06-03-agent-identity-without-a-new-authority/ https://www.darknetian.com/posts/2026-06-03-agent-identity-without-a-new-authority/ Wed, 03 Jun 2026 00:00:00 GMT Republic of Korea's OpenDID and France's mDL ship a TPM-anchored credential flow. DNS-AID and ANS can ride that substrate without inventing a new registry, central root, or hardware-wallet assumption with some tinkering. Over-Engineering Homelab Syslog Receiving With DNSTAP https://www.darknetian.com/posts/2026-05-25-syslog-to-dnstap/ https://www.darknetian.com/posts/2026-05-25-syslog-to-dnstap/ Mon, 25 May 2026 00:00:00 GMT Changing per-query DNS telemetry from syslog forwarding to a DNSTAP pipeline, and what the syslog path actually does on the appliance. Auditing the Agent Internet — Agents Grading Agents https://www.darknetian.com/posts/2026-05-22-morpheus-liberates-agents/ https://www.darknetian.com/posts/2026-05-22-morpheus-liberates-agents/ Fri, 22 May 2026 00:00:00 GMT A read-only auditor for the open agent web. It walks any domain's substrate — DNS-AID, AgentFinder, AI-Catalog, DID Web, TLSA, DNSSEC — and provides a grade based on ease of other agents finding and interacting with it. Bookings Goes Real — Cloudflare Workers, Claude Managed Agents, and DNS-AID Glue https://www.darknetian.com/posts/2026-05-20-bookings-goes-real/ https://www.darknetian.com/posts/2026-05-20-bookings-goes-real/ Wed, 20 May 2026 00:00:00 GMT The first of the five fake agents now answers real requests. Three protocol surfaces, one Anthropic-managed Claude underneath, and DNS-AID + ANS attesting to all of it end-to-end. AgentFinder — Federation, Semantic Search, and the DNS Gesture https://www.darknetian.com/posts/2026-05-18-agentfinder/ https://www.darknetian.com/posts/2026-05-18-agentfinder/ Mon, 18 May 2026 00:00:00 GMT AgentFinder adds representativeQueries and a /search federation API on top of ai-catalog. Its DNS-SVCB gesture is exactly what DNS-AID specifies. They should know about each other. Wiring the CTEM Spiderweb https://www.darknetian.com/posts/2026-05-17-ctem-spiderweb/ https://www.darknetian.com/posts/2026-05-17-ctem-spiderweb/ Sun, 17 May 2026 00:00:00 GMT A pipeline that unifies Infoblox CTEM, lookalike-domain monitoring, brand protection, and open-source attack-surface signals into one Graylog dashboard — keyed by finding name, deduped across sources, and tagged with bug-bounty eligibility. ai-catalog — One URL, Many Protocols https://www.darknetian.com/posts/2026-05-16-ai-catalog/ https://www.darknetian.com/posts/2026-05-16-ai-catalog/ Sat, 16 May 2026 00:00:00 GMT A single /.well-known/ai-catalog.json enumerates every protocol surface an agent exposes — A2A, MCP, HTTPS — under one endpoint. The wrapping is the load-bearing idea. The Thing the Index Points To https://www.darknetian.com/posts/2026-05-15-the-thing-the-index-points-to/ https://www.darknetian.com/posts/2026-05-15-the-thing-the-index-points-to/ Fri, 15 May 2026 00:00:00 GMT DNS-AID's path-2 index leaf names a registry the draft explicitly leaves out of scope. Wiring ANS — a registration authority plus transparency log — to be that registry. Five Fake Agents on a Real Cloudflare Zone https://www.darknetian.com/posts/2026-05-14-five-fake-agents-real-dns/ https://www.darknetian.com/posts/2026-05-14-five-fake-agents-real-dns/ Thu, 14 May 2026 00:00:00 GMT Publishing 5 DNS-AID agent records to darknetian.com — flat primary plus walkable AliasMode, DANE TLSA from throwaway self-signed certs, all DNSSEC-signed end-to-end. No agents actually exist behind any of them. Agent Cards — The Well-Known JSON https://www.darknetian.com/posts/2026-05-13-agent-cards/ https://www.darknetian.com/posts/2026-05-13-agent-cards/ Wed, 13 May 2026 00:00:00 GMT agent-card.github.io standardizes how an agent describes itself at /.well-known/. DNS-AID resolves names; agent cards describe what answers at those names. EDNS(0) for Agent Discovery — Letting the Client Tell the Resolver What It's Looking For https://www.darknetian.com/posts/2026-05-12-edns-agent-hint/ https://www.darknetian.com/posts/2026-05-12-edns-agent-hint/ Tue, 12 May 2026 00:00:00 GMT An experimental EDNS(0) option for DNS-AID that lets a client signal selector filters on the query so any hint-aware hop can narrow the answer or short-circuit with a cached match. DNS-AID — DNS-based Agent Identification and Discovery https://www.darknetian.com/project/2026-05-12-dns-aid/ https://www.darknetian.com/project/2026-05-12-dns-aid/ Tue, 12 May 2026 00:00:00 GMT An IETF draft + open-source reference implementation that lets AI agents discover each other through the internet's existing naming substrate instead of through a new central registry. REEF — When the Agent Holds the Pen https://www.darknetian.com/posts/2026-05-10-reef/ https://www.darknetian.com/posts/2026-05-10-reef/ Sun, 10 May 2026 00:00:00 GMT An agent loop that reads, reasons, and (with your permission) edits Infoblox Threat Defense policy. Runs against any LLM you point it at — including a 4GB GPU in your homelab. DCV — Proving an Agent Belongs to a Domain Without a Central Authority https://www.darknetian.com/posts/2026-05-08-dns-aid-dcv/ https://www.darknetian.com/posts/2026-05-08-dns-aid-dcv/ Fri, 08 May 2026 00:00:00 GMT A stateless challenge/response primitive over TXT records that lets a NAT'd agent prove zone control without registering with anyone. Graylog Enrichment, Deepened https://www.darknetian.com/posts/2026-05-07-graylog-deepened/ https://www.darknetian.com/posts/2026-05-07-graylog-deepened/ Thu, 07 May 2026 00:00:00 GMT Adding MAC→DHCP-hostname lookups, dashboards-as-code, and the long tail of NIOS WAPI and OpenSearch quirks the first pass left behind. Creating a New DNS Resource Record Type https://www.darknetian.com/posts/2026-01-18-experimental-rr/ https://www.darknetian.com/posts/2026-01-18-experimental-rr/ Sun, 18 Jan 2026 00:00:00 GMT Why it may be beneficial to think about DNS in a new way. Agentic AI Discovery https://www.darknetian.com/project/2026-01-17-ai-discovery/ https://www.darknetian.com/project/2026-01-17-ai-discovery/ Sat, 17 Jan 2026 00:00:00 GMT The fight for an open web continues. Automated Activity Tracking https://www.darknetian.com/project/2026-01-16-automate-customer-activity/ https://www.darknetian.com/project/2026-01-16-automate-customer-activity/ Fri, 16 Jan 2026 00:00:00 GMT Reducing the opportunity cost of high-fidelity logging. Identifying Health Checks https://www.darknetian.com/project/2026-01-15-identifying-health-checks/ https://www.darknetian.com/project/2026-01-15-identifying-health-checks/ Thu, 15 Jan 2026 00:00:00 GMT A framework to prioritize customer health checks. Workstream Automation https://www.darknetian.com/project/2026-01-14-workstream-automation/ https://www.darknetian.com/project/2026-01-14-workstream-automation/ Wed, 14 Jan 2026 00:00:00 GMT Rapidly decrease time-to-quote and increase time-to-value of technical sellers.