I want to run some authoritative DNS servers and as most DNS servers support IPv6 by now, I think I can save a pretty penny by going IPv6 only.

https://adguard-dns.io/en/public-dns.html -> Our server addresses

(Quote)

You can just host DoH/DoT with AdGuard/Pi-hole and proxy only DNS requests encrypted.

(Quote)

Now you're confusing. You hijacked someone else's post saying they can use DNS verification for private address certs. Stop fucking linking to the docs and quote where this is possible, because you ju

Of course DNS cannot be involved in verifying IP address challenges because being able to add a DNS entry somewhere doesn't prove ownership of an IP address and DNS PTR records don't support arbitrary

Regardless, you just made the argument why 6 day with customer facing DNS certificates is stupid, so now really confused what your point was when nobody else was talking 6 day limits with DNS certific

(Quote)

Why? How does giving a hypothetical example that shows that 6 days expiry time for a certificate in any way suggest I was suggesting using IP addresses? Or do you think DNS just stops working over Bla

(Quote)

(Quote)

(Quote)

(Quote)

* @chunkserve (appreciate the hard work, but still hoping for IPv6 Reverse DNS support)

I do DDNS using my own ddns-script porkbun script for OpenWRT (I need to publish the package so it can be on the upstream ddns-scripts) so that is not a problem. I just want more control over the netw

What now? What give you the impression I'd be telling people to go to my (BTW hypothetical) store's IP address rather than DNS? Not only didn't I say anything of the sort, that wouldn't even solve the

Why would you not be using DNS in the first place for your store, instead you are just directing people to your store's IP address?

(Quote)

It sounds to me like what you need is mostly dynamic DNS since you selfhost. You could get a free duckdns subdomain for your selfhosted services and then just set up a CNAME to that domain with whatev