{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreidgcgyahm6mo674xf4icx2pjow4iphbkmfxb66yxctocteclrctoy",
"uri": "at://did:plc:ivbknywyskln22er3nkssdhl/app.bsky.feed.post/3mkgzjg7ielc2"
},
"path": "/t/pre-rfc-dns-domains-as-package-namespaces/24202#post_13",
"publishedAt": "2026-04-27T00:59:32.000Z",
"site": "https://internals.rust-lang.org",
"tags": [
"crates.io"
],
"textContent": "> What happens when a domain expires and another entity gets control over it? Should the existing crates get kicked out? Should they even be able to publish new crates in that namespace? If not, how would that be verified?\n\nThis is described in both the first post and the more detailed notes posted subsequently.\n\nIn the current proposal updates to existing crates are authorized according to crates.io ownership rules, which mean that (1) domain transfer doesn't grant crate ownership and (2) domain expiration doesn't revoke publishing permissions on crates.io.\n\nAlternative choices are described, such as requiring verification on each upload. This would improve security at the potential cost of ecosystem churn.\n\nThe verification process is also described, at great length. Are there any points you found unclear?",
"title": "[Pre-RFC] DNS domains as package namespaces"
}