3 ms·
wait... what about ip6 and lets encrypt? I thought I had it working with no ip6 anything or AAAA records??
by beefnugs 2y ago
wait... what about ip6 and lets encrypt? I thought I had it working with no ip6 anything or AAAA records??
- saghm 2y agoIt sounded like they were saying that people had badly configured IPv6 and/or AAAA records that prevented stuff from working; the fact that you don't technically need it is why the "solution" of deleting AAAA records would make sense in this context. If my understanding is correct, then part of the problem of IPv6 adoption is people not really understanding what it is or why it might be useful, instead seeing it as a nuisance that they should avoid. Crucially, they're not exactly _wrong_ with this viewpoint because IPv6 doesn't really provide any benefits at the individual adoption level; the benefits are only realized if others adopt it as well, and that's not likely to be a convincing argument to someone having a concrete, immediate issue with their servers that they can address (pun intended) by not supporting IPv6.
- schoen 2y agoYes, exactly. If you do have AAAA records, Let's Encrypt (not unlike other software and services!) will prefer the AAAA records when doing domain validation for your domain. So if you have a correct A record and an incorrect AAAA record, your domain validation process will fail. You can then "fix" this by deleting the AAAA record, but it isn't a fix in the larger scheme of things, but indeed it makes plenty of users happy right away.