You are the experts, but if Alby can do what brave does for IPFS urls, I.e intercept urls that have Pkarr as TLDs, and route the cleaner endpoint while keeping the address bar showing the original URL, that would defined be fun.

we can ship Rust or wasm code that takes pubky or pkarr url and give you back either a normal domain or an ip and port. in fact if you can Rust code in extensions, then we can do TLS too that doesn't depend on CAs.

but I don't know enough about extensions limitations.