It would have been nice if they came up with something shorter like .lan.
It should be reserved for sex toys.
Just saying.
What are you doing step-LAN?
Please don’t use the duplex again.
I saw you peeked inside my ssh key drawer last night step-LAN
I used to wonder why porn sites aren’t required to use ‘.cum’ instead of ‘.com’…
The original 3, “.cum”, “.nut”, and “.orgasm”.
Ah yes, the golden
showerage of the web.
Well did you find out?
some sex toys are external
Then they go on .external, obviously.
Browsers barf at non https now. What are we supposed to do about certificates?
Either ignore like I do or add a self signed cert to trusted root and use that for your services. Will work fine unless you’re letting external folks access your self hosted stuff.
I found options like .local and now .internal way too long for my private stuff. So I managed to get a two-letter domain from some obscure TLD and with Cloudflare as DNS I can use Caddy to get Let’s Encrypt certs for hosts that resolve to 10.0.0.0/8 IPs. Caddy has plugins for other DNS providers, if you don’t want to go with Cloudflare.
Might be an idea to not use any public A records and just use it for cert issuance, and Stick with private resolvers for private use.
It’s a domain with hosts that all resolve to private IP addresses. I don’t care if someone manages to see hosts like vaultwarden, cloud, docs or photos through enumeration if they all resolve to 10.0.0.0/8 addresses. Setting up a private resolver and private PKI is just too much of a bother.
Why do I care what ICANN says I can do on my own network? It’s my network, I do what I want.
Try using .com for your internal network and watch the problems arise. Their choice to reserve .internal helps people avoid fqdn collisions.
Well as long as the TLD isn’t used by anyone it should work internally regardless of what ICANN says, especially if I add it to etc/hosts
Sure, you can do whatever you want. You could even use non-rfc1918 addresses and nobody can stop you. It’s just not always a great idea for your own network’s functionality and security. You can use an unregistered TLD if you want, but it’s worth knowing that when people and companies did that in the past, and the TLD was later registered, things didn’t turn out well for them. You wouldn’t expect .foo to be a TLD, right? And it wasn’t, until it was.
Ah good point. I guess a future-proofed guarantee that the domain will never be used externally would be easier to use than trying to somehow configure my DNS to never update specific addresses.
deleted by creator
Certain domain names are locally routed only. So if you use internal or local as a tld, you can just assign whatever names you want and your computer won’t go looking out on the internet for them. This means you and I can both have fileserver.local as an address on our respective network without conflicting. It’s the URI equivalent of 192.168.0.0/16.
Interesting that you should use “.local” as an example, as that one’s extra special, aka Multicast DNS
YouCANN do anything you want?
That’s good, I never liked the clunky
.home.arpadomain.It was just always so annoying having to go into the iPhone keyboard punctuation twice for each domain
Thanks but I hardly needed anyone permission to not use that. .local still works just fine.
Except when it doesn’t. It can have issues around multicast dns.
I’ve had issues with .local on my Android device. Straight up doesn’t work. I had to change to .lan
I think it was only added in android 12.
Same here, just stumbled across this issue yesterday when I tried to restructure my network to use .local
It just means .internal won’t be relayed out on the internet, as it will be reserved for local only.
Good luck with that. .local is reserved for mDNS calls, and not every OS treats it the same way. Ask me how I know.
Been working fine for me for twenty years or more in a mixed environment.
I used to use .local but mDNS can get confused, .home has been fine though
Took long enough
Thank god. Now iOS will finally recognize it
Missed the opportunity for
.myshit.I guess no one offered anything for .internal
routerlogin.net how I do not miss you
i loved that it was an option. not sure why it was changed.
Woohoo! We internal now! No more FQDN collisions!
My network is .milkme and I have nipples… will they approve it?
