Hey @jamesbeadle
You raise a good point, which has lead to quite some discussions within the boundary node team when the first SNSes launched.
Unfortunately, there is nothing we can really do:
At the moment, no DAO can own or control a domain name. Hence, there is always someone that owns the domain and has full control over it.
We could think about introducing some special mode in our custom domains service that restricts changing of the domain to canister mapping as you suggest. But that also doesn’t really work because:
- If the owner of the domain is lazy, they point it to some other hosting services (outside of the IC). However, I am not sure users would even notice/be able to tell that this is not hosted on the IC.
- Anybody can run their own HTTP gateway with a custom domain and nothing prevents them from pointing the domain then to whatever canister they want.
The only real solution to the problem is having an on-chain naming system: Technical Working Group: Naming System