I'd really like to work on an NSIS Windows installer for ncdns.
ncdns is highly standards-compliant and is pretty much a prerequisite for TLS support in current browsers. Unfortunately it's difficult to install, especially when installing TLS support. An NSIS installer would help here.
- Modify Unbound configuration to use ncdns (without requiring a restart of Windows after installation).
- Install ncdns as a Windows service (with minimal privileges).
- Allow the user to choose to optionally install TLS support for at least one major browser (with minimal privileges). (This means that this bounty is dependent on the TLS bounty.)
- If manual user configuration of the browser is needed (e.g. setting up an HPKP pin in a browser that doesn't provide an automated API for this), the installer must prompt the user to do so, provide instructions, and require the user to confirm in the installer that this has been performed.
- Must not produce distracting modifications to user login screen (e.g. adding a user to the screen).
- Must work on at least one release of Windows between 7 and 10 (inclusive), either 32-bit or 64-bit.
- Doesn't need to install Namecoin Core.
- Doesn't need to install Unbound or dnssec-trigger.
- Doesn't need to set up DNSSEC support.
- Doesn't need to build reproducibly.
Is this something NMDF would be interested in sponsoring? Maybe we could try to do a fundraiser for this, where NMDF would match raised funds 1:1?