Conversation

me: http://search:4433/
firefox: you got it chief! loading https://search:4433… oops, ssl connection failed
me: what. no i said http not https. http://search:4433
firefox: ohh right, no problem! loading https://search:4433… oops, ssl connection failed
me: neofox_angry

1
0
1

oh you’re fucking kidding me. there’s a .search tld and it’s on the hsts preload list. fuck offfffffffffffffffffffffffffffffffffffffffff

1
0
1

@srxl

Google requested to make .search a dotless domain, serving as a redirection service the search functionality in browsers.

lol. Okay.

but yeah i don't know what domain you're meant to use for internal stuff like this, https://www.iana.org/assignments/special-use-domain-names doesn't really have anything

1
0
1

@5225225 @srxl either stuff that you have a domain for, .local if it is something that speaks mdns, or .localhost if it runs on your local system (and you don’t use chrome because it has a long standing bug with localhost subdomains)

2
0
1

@charlotte @srxl though "stuff you have a domain for" would mean you can't use HSTS preloading on that domain (you can't preload www.example.net and not internal.example.net)

which may not matter for you, or it might. (that or you go through the effort to get a valid cert for the domain)

1
0
1

@5225225 @srxl yeah the subdomain thing is for getting a valid TLS cert

1
0
1

@charlotte @5225225 yeah i mean i am cheating a little here. the actual fqdn being resolved here is search.int.isincredibly.gay but i have a line in my /etc/resolv.conf with search int.isincredibly.gay so i can have that little shortcut. really annoying that it not only conflicts with a tld, but that tld is on the fucking hsts preload list grumble grumble

1
0
1

@srxl @5225225 out of raccuriousity, what search do you run on there? something local or something akin to searxng?

1
0
0

@charlotte @5225225 playing around with https://hister.org/ - it looks very cool, and like something i have wanted for a very long time

0
1
1
@charlotte @srxl @5225225 .internal is also a reserved tld for this purpose (technically .local too, but mdns ruined it)
1
0
0

@novenary @charlotte @srxl i don't think it's been actually reserved yet, the RFC for it is still a draft ( https://datatracker.ietf.org/doc/html/draft-davies-internal-tld-06 , presumably?)

though not expired so clearly someone's interested in pushing this through

2
0
2
@5225225 @charlotte @srxl apparently it's reserved by ICANN but not yet by IETF, good to know
either way yeah i personally use one of my own domains for this, but in the context of op I've volunteered all of my domains to the HSTS preload list :P
also I do TLS over tailscale which is extra funny
0
0
0

@5225225 @novenary @srxl
yeah atm it can be assigned by the iana

.home, .corp, .lan, .host, .localdomain are reserved and not defined by any rfc?

0
0
0