dnssec.eth
Custom ENS resolver with onchain DNSSEC verification using the EIP-7951 P-256 precompile. Demonstrates bidirectional DNS↔ENS linking with Algorithm 13 (ECDSAP256SHA256).
Resolver Dashboard
Resolver Contract
0x7233d88AF9ee1eC3833F6AF4f733c1C5c0587Da2Verifier Contract
Loading...
Gateway URL
Loading...
ENS ↔ DNS Link
dnssec.eth↔_ens.eketc.co
Contract Owner
Loading...
Supported Interfaces (ERC-165)
ITextResolver: ...IAddrResolver: ...IExtendedResolver: ...
P256
EIP-7951 Enabled
Using P-256 precompile at 0x0100 for ECDSA verification
Stored Records
ETH Address
On-chainLoading...
Text Records
name...
description...
url...
avatar...
email...
com.twitter...
com.github...
org.telegram...
Set Records
Loading...
DNSSEC Verification Demo
_ens.eketc.co
1
Trigger CCIP-Read
Call text() or addr() on resolver, receive OffchainLookup revert
2
Fetch Proof Bundle
Request DNSSEC proof from gateway server
3
Verify DNSSEC Proof
Validate chain of trust using Algorithm 13 (P-256)
4
Return Result
DNSSEC-verified record returned to caller
CCIP-Read Flow Diagram
1
Client RequestDApp / ENS App → Resolver
text("dnssec.eth", "name")
2
OffchainLookup RevertResolver → Client
revert OffchainLookup(urls, callData, callback)
3
Gateway RequestClient → Gateway
POST gateway.eketc.co/ccip-read
4
DNSSEC Proof BundleGateway → Client
{ proofBundle, question } for _ens.eketc.co
5
Callback ExecutionClient → Resolver
ccipCallback(proofBundle, question)
6
DNSSEC VerificationResolver → Verifier
verify(proofBundle) → EIP-7951 P-256
7
Verified ResultResolver → Client
return "estmcmxci" (verified)
Legend
Contract Call
Revert (EIP-3668)
Offchain Request
Response
Resolver: 0x7233d88A...
Verifier: 0x580F2Db4...

