i noticed a simple GET request to a nostr.json file shows a list of all verified nostr keys mapped to that DNS name. This behaviour is by design according to NIP-05.

I am not sure i am happy with this, but do not have a good solution.

https://{example.com}/.well-known/nostr.json

example: https://nostrplebs.com/.well-known/nostr.json

[772.777]