I didn't say split-horizon DNS is needed for getting LE certs. Just that a real domain name is a requirement to obtain LE certs in the first place. How will a

I didn't say split-horizon DNS is needed for getting LE certs. Just that a real domain name is a requirement to obtain LE certs in the first place. How will an A/AAAA query from something like https://my-rpi.my-real-domain.xyz https://my-rpi.my-real-domain.xyz resolve using mDNS? All DNS queries go to my LAN DNS server by default. I don't particularly care that I can't create A/AAAA records on my LAN DNS server (which is a Time Capsule, btw) to keep the queries inside. To me, the potential leakage of internal addresses/names is an acceptable tradeoff for the convenience. Btw, how is a reverse DNS lookup ever going to do what you mention? I am not creating any PTR records anywhere.