Nick@jerry Can you please remove the dualstack.t.sni.global.fastly.net CNAME from the media.infosec.exchange zonefile? I'm trying to see some media over here.
Jerry 🦙💝🦙@jerry Not if you retain the A's and AAAA's. Fastly's not tying to sell you any other ideas, are they?
@nicholasburns Fastly's preferred model (as is the case with most CDNs) is to use a cname for non-apex domains (e.g., infosec.exchange). It's been like that for several years, but I did just move to the IP addresses a minute ago to see if that fixes the problem - what were you seeing?
@jerry Fastly and other corporate surveillance firms' 'preferred model' have predictable recommended TTLs (which of course has nothing to do with so-called 'best practices'). Will let you know if your change did anything in ~30 minutes.
The domain dualstack.t.sni.global.fastly.net is not permitted to resolve on my LAN.