Embed Notice

@badnetmask @jwildeboer @homelab

Yep, it'll resolve home.arpa locally.

But, that's no good if you want to do SSL *and* have it work on visitors devices (because issuing with your CA won't help unless you also add your CA cert to their devices - they'd have to **really** trust you for that)

Not sure I agree on the best practice bit though.

Having FF use your local resolver (which ideally uses encrypted upstreams) is (IMO) far better because it reduces centralisation.