Full-stack developer. Ham, private pilot, maker.
I’m just this guy, you know?
| Ham radio account | https://mastodon.hams.social/@ww1x |
| Homepage | https://schrockwell.com/ |
| GitHub | https://github.com/schrockwell |
| Gemini Capsule | gemini://gemini.rockwellschrock.com/ |
When you get a certificate from Let’s Encrypt, our servers validate that you control the domain names in that certificate using “challenges,” as defined by the ACME standard. Most of the time, this validation is handled automatically by your ACME client, but if you need to make some more complex configuration decisions, it’s useful to know more about them. If you’re unsure, go with your client’s defaults or with HTTP-01.
@theirongiant Good sleuthing. Yes, my router blocks ICMP requests (first time I've seen someone ping via Wireshark). And TIL about the MacTCP DNS limitation.
I've updated the DNS to a plain A record. The previous TTL was very long so it may take several hours to propagate.
The two AIR settings screens are attached, to confirm I've got everything correct. ENHANCE!
