4 ms·
15$ a year for a domain, throw traffic through local [split?] dns and traefik with the lets encrypt dns challenge and call it a day? i have over 25 internal dom
by katbyte 6y ago
15$ a year for a domain, throw traffic through local [split?] dns and traefik with the lets encrypt dns challenge and call it a day? i have over 25 internal domains & services with 25 certs auto renewing and no one can tell - it just works and is easier the self signing certs and loading them into whatever rando service or device your trying to secure
- midasuni 6y agoSplit dns is dying - doh is sorting that. Sure canary domains exist, but they won’t forever
- katbyte 6y agoi'm not sure i follow, what does split DNS have to do with DoH? i don't want my internal DNS addresses public, there is no need + security and for some addresses i have different IPs internal vs external.
- midasuni 6y agoBrowsers send to external provider like google, rather than the network provided server which has the internal addresses (and which may override external addresses for various reasons)
- katbyte 6y agosplit-dns will never die, it would kill far to many internal corp environments where there is no public DNS entries.