pull down to refresh

Some questions:
  1. How does a subspace Certificate get shared off chain? Does the Operator of the Space have to have an open TCP or UDP port for spacesd to serve some data to find that subspace? Is there another peer to peer messaging protocol that is part of Spaces? The section https://spacesprotocol.org/paper/#record-storage seems very open ended.
  2. If so, how does a third party know the IP address of the Operator? Seems like there needs to be some discovery method.
  3. If this is to serve as a decentralized DNS, how is the equivalent record published by the Space Operator or subspace Operator?
  4. How does this work with nostr if nostr relies on DNS, SSL, and centralized CAs?