dnssec.eth

Custom ENS resolver with onchain DNSSEC verification using the EIP-7951 P-256 precompile. Demonstrates bidirectional DNS↔ENS linking with Algorithm 13 (ECDSAP256SHA256).

Resolver Dashboard

Verifier Contract
Loading...
Gateway URL
Loading...
ENS ↔ DNS Link
dnssec.eth_ens.eketc.co
Contract Owner
Loading...
Supported Interfaces (ERC-165)
ITextResolver: ...IAddrResolver: ...IExtendedResolver: ...
P256
EIP-7951 Enabled
Using P-256 precompile at 0x0100 for ECDSA verification

Stored Records

ETH Address
On-chain
Loading...
Text Records
name...
description...
url...
avatar...
email...
com.twitter...
com.github...
org.telegram...

Set Records

Loading...

DNSSEC Verification Demo

_ens.eketc.co
1
Trigger CCIP-Read
Call text() or addr() on resolver, receive OffchainLookup revert
2
Fetch Proof Bundle
Request DNSSEC proof from gateway server
3
Verify DNSSEC Proof
Validate chain of trust using Algorithm 13 (P-256)
4
Return Result
DNSSEC-verified record returned to caller

CCIP-Read Flow Diagram

1
Client RequestDApp / ENS AppResolver
text("dnssec.eth", "name")
2
OffchainLookup RevertResolverClient
revert OffchainLookup(urls, callData, callback)
3
Gateway RequestClientGateway
POST gateway.eketc.co/ccip-read
4
DNSSEC Proof BundleGatewayClient
{ proofBundle, question } for _ens.eketc.co
5
Callback ExecutionClientResolver
ccipCallback(proofBundle, question)
6
DNSSEC VerificationResolverVerifier
verify(proofBundle) → EIP-7951 P-256
7
Verified ResultResolverClient
return "estmcmxci" (verified)
Legend
Contract Call
Revert (EIP-3668)
Offchain Request
Response
Resolver: 0x7233d88A...
Verifier: 0x580F2Db4...