About this domain
This domain and its subdomains exist to support license verification for the products that depend on it.
It is operated as a small, distributed system so that products can confirm a license is still valid even when individual components are unreachable.
Products may also validate fully offline using the license's own cryptographic signature; that mode requires no network and is therefore not served from this domain.
How verification works
- DNS-based verification Clients perform a DNSSEC-validated lookup against a hashed license label. The DNS response itself is the authoritative answer — no token state, freshness bounded by TTL, and resilient to API outages.
- API-based verification Clients call the validation API, which returns a short-lived signed token they may re-use offline until it expires. Privacy-preserving, with fine-grained revocation that takes effect on the next token renewal.
- Air-gapped verification Clients periodically fetch a rotating set of cryptographic public keys from a key-distribution endpoint and use them to verify licenses entirely locally between rotations. No network is required during steady-state runtime; revocation propagates at the cadence of the key rotation schedule.
Subdomains
- api.license.patterneddesigns.ca HTTPS validation API Issues short-lived validation tokens for active licenses. The runtime endpoint product clients call for API-based verification.
- dns.license.patterneddesigns.ca DNSSEC license zone A DNSSEC-signed zone whose hashed license labels resolve to TXT records carrying the current valid / revoked status. The authoritative source for DNS-based verification.
Part of
patterneddesigns.ca