How does turret19.local talk to commandserver.local? I imagine there has to be someone on the middle who says yes 192.168.1.24 is actually the command server an

How does turret19.local talk to commandserver.local? I imagine there has to be someone on the middle who says yes 192.168.1.24 is actually the command server and not camera3.local or public webserver.local How is it supposed to work? How can LE know that you are 192.168.1.24? Maybe we'd need some kind of certificates that are only valid within a certain zone? How would that work? Thanks.