Name Processing
Last updated
Was this helpful?
Last updated
Was this helpful?
In place of human-readable names, PNS works purely with fixed length 256-bit cryptographic hashes. In order to derive the hash from a name while still preserving its hierarchal properties, a process called Namehash is used. For example, the namehash of 'alice.pls' is 0x7fdf67417cd18098194f331e7df5b839e400fd37e0607276acfeea6959fb4e31; this is the representation of names that is used exclusively inside PNS.
Before being hashed with namehash, names are first normalized, using a process called UTS-46 normalization. This ensures that upper- and lower-case names are treated equivalently, and that invalid characters are prohibited. Anything that hashes and resolves a name must first normalize it, to ensure that all users get a consistent view of PNS.
Before a name can be converted to a node hash using Namehash, the name must first be normalized and checked for validity - for instance, converting fOO.pls into foo.pls, and prohibiting names containing forbidden characters such as underscores. It is crucial that all applications follow the same set of rules for normalization and validation, as otherwise two users entering the same name on different systems may resolve the same human-readable name into two different PNS names.
Applications using PNS and processing human-readable names must follow for normalization and validation. Processing should be done with non-transitional rules, and with UseSTD3ASCIIRules=true.
The Javascript library performs both normalization and hashing as described here. All of the PNS libraries covered in the DApp Developer Guide also perform normalization and hashing.
Namehash is a recursive process that can generate a unique hash for any valid domain name. Starting with the namehash of any domain - for example, 'alice.pls' - it's possible to derive the namehash of any subdomain - for example 'iam.alice.pls' - without having to know or handle the original human-readable name. It is this property that makes it possible for PNS to provide a hierarchal system, without having to deal with human-readable text strings internally.
domain - The complete, human-readable form of a name; eg, iam.alice.pls.
label - A single component of a domain - eg, iam, alice, or pls.
label hash - the output of the keccak-256 function applied to a label; eg, keccak256(βplsβ) = 0xc26659bcd13c5b01c7a71e39e3fd1cdb5fe4d29361f167299bc82ba929a1aa4b
node - The output of the namehash
function, used to uniquely identify a name in PNS.
First, a domain is divided into labels by splitting on periods (β.β). So, βrichard.wallet.plsβ becomes the list [βrichardβ, βwalletβ, βplsβ].
The namehash function is then defined recursively as follows:
A sample implementation in Python is provided below.
In some cases, you may need to know the hash of the name stored in PNS. labelhash means hash of the label of the domain (eg: makoto
for makoto.pls
) and namehash is the hash which combines labelhashes. We are currently working to include this information in our Manager app. In the meantime, you can query the information via
Namehash is specified in .
with the following query.
Because of the large number of characters in unicode, and the wide variety of scripts represented, inevitably there are different Unicode characters that are similar or even identical when shown in common fonts. This can be abused to trick users into thinking they are visiting one site or resource, when in fact they are visiting another. This is known as a .
User agents and other software that display names to users should take countermeasures against these attacks, such as by highlighting problematic characters, or showing warnings to users about mixed scripts. may serve as a useful reference for user-agent behaviour around rendering IDNA names.