I’ve been a happy customer of Gandi for 6-7 years. I originally chose them because I operate my own DNS server on my VPS and Gandi made it easy to add a glue re

I’ve been a happy customer of Gandi for 6-7 years. I originally chose them because I operate my own DNS server on my VPS and Gandi made it easy to add a glue record for the primary nameserver and they provide a free secondary nameserver¹ but these features wouldn’t be something that 99% of customers need nor want. On that note, their secondary nameserver suited my needs until I started using DNS authentication for Let’s Encrypt wild-card certificates. Their secondary nameserver only supports requesting a full zone transfer (AXFR) every half hour or so. For some reason, they don’t use IXFR or – what would be more useful to me – DNS NOTIFY. This means that the secondary name server lags behind the primary nameserver by about half an hour. This results in the Let’s Encrypt DNS authentication failing randomly, depending on whether they checked the primary or secondary nameserver for the authenticating TXT records. I plan to move the `_acme-challenge.example.com` to a different zone that doesn’t use the secondary nameserver but I haven’t got around to it yet. Otherwise, I’ve been very happy with Gandi. ¹ https://docs.gandi.net/en/domain_names/advanced_users/secondary_nameserver.html https://docs.gandi.net/en/domain_names/advanced_users/second...