BIP 353 (DNS Payment Instructions) primary sources — 2026-05-03
Project status in this pass
- No separate standalone BIP 353 whitepaper or litepaper surfaced.
- The clearest current source of truth is the completed BIP itself, its raw source in the bitcoin/bips repository, and the linked bitcoin-dev discussion thread.
- The materials consistently frame BIP 353 as a verifiable DNSSEC-backed standard for mapping human-readable identifiers to Bitcoin payment instructions, not as a wallet-specific alias feature.
Primary-source snapshots
1) Canonical BIP page
- URL: https://bips.dev/353/
- Key excerpt:
- The BIP defines itself as “DNS Payment Instructions” and says it proposes a standard format for encoding BIP 21 URI schemes in DNS TXT records.
- It explains the motivation in terms of human-readable payment destinations, DNSSEC-backed verification, and relatively private DNS resolution.
- It positions the standard above particular payment rails by encoding general
bitcoin:URIs rather than only one invoice format.
2) Raw specification in bitcoin/bips
- URL: https://raw.githubusercontent.com/bitcoin/bips/master/bip-0353.mediawiki
- Key excerpt:
- The spec says payment instructions for a given user and domain are stored at
user.user._bitcoin-payment.domainin a single TXT record. - It says clients must reconstruct the
bitcoin:URI from the TXT record’s character strings, ignore non-bitcoin:TXT records at the same label, and reject ambiguous multi-record situations. - It also says clients must fully validate DNSSEC signatures to the DNS root and must not trust a remote resolver to do DNSSEC validation on their behalf.
- The spec says payment instructions for a given user and domain are stored at
3) Display, rotation, and proof sections in the raw specification
- URL: https://raw.githubusercontent.com/bitcoin/bips/master/bip-0353.mediawiki
- Key excerpt:
- The display rules say wallets should render verified names as
₿user@domainand should copy the underlying URI instead of the alias when possible. - The address-reuse section says reusable onchain addresses should be rotated regularly and, where practical, payment instructions should avoid embedding a reusable onchain address at all.
- The PSBT section defines
PSBT_OUT_DNSSEC_PROOF = 0x35, showing BIP 353 also contemplates hardware-wallet or external-signer verification flows.
- The display rules say wallets should render verified names as
4) Backwards-compatibility section in the raw specification
- URL: https://raw.githubusercontent.com/bitcoin/bips/master/bip-0353.mediawiki
- Key excerpt:
- The BIP says it is intended to extend and subsume the existing Lightning Address scheme.
- It allows wallets to fall back to Lightning Address logic when DNS resolution fails, but warns that indefinite fallback can leak sender IP information.
- This is a strong clue that BIP 353 should be cataloged as payment-instruction interoperability infrastructure, not merely as an alternative naming convention.
5) Linked bitcoin-dev discussion
- URL: https://groups.google.com/g/bitcoindev/c/uATaflkYglQ
- Key excerpt:
- The BIP metadata links a bitcoin-dev discussion titled “Mapping Human-Readable Names to Payment Instructions.”
- Even without treating the list discussion as more authoritative than the merged BIP, its existence helps confirm that the standard’s design goal is broad Bitcoin payment-instruction mapping rather than a single wallet implementation detail.
Working conclusion
BIP 353 is best cataloged as DNSSEC-backed human-readable payment-instruction infrastructure. The deciding evidence in this pass was the combination of BIP 21-in-DNS encoding, strict client-side DNSSEC validation, the ₿user@domain display convention, support for richer payloads like BOLT 12 offers, and PSBT proof fields that let external signers verify the resolved recipient.