.GDBx is the native namespace for the sovereign web —
an independent, zero-trust cryptographic substrate that routes every distributed protocol through one immutable address.
Powered by a pure WebCrypto core and a firewall-gated hybrid mesh, it delivers deterministic, pool-replicated state sync with complete architectural independence.
One address. Every technology. Zero dependencies. 100% open, gun-free — sovereign, verified, unbounded.
A production-grade address namespace, evolved from the Tor v3 onion design — checksummed, versioned, network-aware, and identity-bound.
BLAKE3 checksum + Base32 (RFC 4648). Typo-proof, forgery-proof, collision-resistant — with version & network bytes built in.
One address → WebRTC (<30ms), Nostr (<200ms), WebSocket (<150ms), Tor v3, I2P, IPFS. Automatic selection + fallback.
LWW-CRDT with SEA-signed deltas. Conflict-free merge, real-time WebSocket push, presence heartbeat, leaderboard analytics.
Cloudflare Workers + Durable Objects + Pages. Local-first by design — no central server, no single point of failure.
Route to any network through a single .GDBx address — the protocol picks the fastest available path.
Real-time diagnostics straight from the GDBx edge — every number here is fetched from the live API, not mocked.
Worldwide replication network, breathing in real time: rotating node topology, live delta feed, pool health, transport mix and leaderboard.
Open this page in two tabs — messages appear in both in realtime through the GDBx pool (shared .GDBx aeaagiao… · signed GDBx + PoW · WS + mirror + hybrid-mesh · room isolated by playground/<room>/msg/… prefix).
Local gateway: gdbx ftp gateway --port 2121 → FileZilla 127.0.0.1:2121 with Username <addr>.gdbx — files are chunked (256KB, AES-GCM, BLAKE3) and pool-replicated, like GunX's WebRTC but sovereign.
gdbx ftp gateway --port 2121 gdbx ftp put ./local.pdf /docs/paper.pdf gdbx ftp get /docs/paper.pdf ./local.pdf gdbx ftp ls /docs gdbx ftp sync /docs --watch
Two peers (Node A + Node B) talking through the GDBx edge. Type into Node A — watch the signed CRDT delta fly over WebSocket and land in Node B in real time.
Generate a .GDBx address from an uncompressed P-256 public key, or validate any address — fully client-side, zero data leaves your browser.
Public key — uncompressed P-256, hex (04||X||Y, 130 chars)
Paste any .gdbx address — checksum, version & network are verified instantly
Open and CORS-enabled — DID registry, signed CRDT sync over HTTP/WS/Nostr relay, pool status, GDPR purge. Every write is GDBx-signed + PoW-gated; reads need no keys.
Zero-trust by default. Every layer of GDBx is hardened — from the address itself to the sync fabric.
First 2 bytes of BLAKE3 over the payload — a single typo or forgery attempt is detected instantly. Same pattern proven by Tor v3 onion addresses.
ECDSA P-256 public keys via Gun SEA. did:gdbx:<addr> — verifiable identity without any central authority.
Difficulty-scaled proof-of-work gates writes — network abuse becomes economically infeasible while honest peers stay instant.
SEA ECDSA-signed CRDT deltas — only authorized mutations merge into the mesh. End-to-end integrity at every hop.
Every write requires a fresh nonce + timestamp inside a 60-second sliding window. Replayed requests are rejected with 401 before touching storage.
DELETE /api/v1/identity — cryptographic erasure of DID, deltas and presence after a SEA proof-of-ownership. Private keys never leave your device.
Sliding-window limits per IP / address: DID mint 10/min, writes 30/min, reads 120/min. Abuse gets a clean 429 + Retry-After.
Flat-primitive JSON only, 2MB-per-delta platform boundary with automatic client chunking beyond that (effective size unlimited), strict key charset, bounded DID services. Malformed input is rejected before any write path.
Seven phases shipped and live — from the .GDBx address codec to the self-sovereign mesh, replication pool, hybrid transports, playground, CLI, FTP gateway and org-wide fabric.