Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- But whyby indigodaddy
- Perhaps you want a website for your Monterey cypress and want the domain macroc.arpa?by Brendinooo
- > Once DNS finishes propagating
Say what?
by tosti - A lie. DNS doesn't propagate.by megagpt1
- > feel free to provide fake information as it doesn’t verify any of it
Uhh... Please don't. This is how nice things get taken down due to abuse.
> This is handy because many (though not all) certificate authorities refuse to serve .arpa domains
IIRC, .arpa domains are based on locations in the address space. CAs are supposed to secure your connection to a specific entity, not only a specific location, so that's probably why.
by LoganDark - Thanks for saying this.by pmkary
- You might not even need to go through HE. Many ISPs allow you to set your own PTR records / rDNS delegations if you ask them, since this is also necessary to host email servers.by preisschild
- Do these free HE assigned IPv6 prefix(es) just remain valid indefinitely even when not actually being used/routed?
- That would be my assumption, although I wouldn't bet on it being as stable as a traditional domain registration
- If you don't use it at all, they do take the prefixes away. I lost a prefix when I did a house move and a server move and took a couple years to get around to setting up the tunnel... They didn't undelegate the DNS until I poked them to either please let me have the prefix back or fix DNS.
I have native ipv6 at home and on my hosting, so that's nice. Unfortunately the he.net tunnels are used for a lot of abuse now and you treated like a bot if you use them to go to popular websites. :(
by toast0 - Hurricane Electrics brings back memories of first playing around with IPv6 many years ago. Thanks a lot to them for offering such a great service free of charge for anyone to learn about IPv6 networking. Sometimes I wonder don't they have a lot of abuse from those services with people using them as proxies or somethingby merpkz
- You can get a TLS certificate on .arpa.
https://crt.sh/?q=%25.arpa&exclude=expired&group=none
There are websites as well
by ValdikSS - Many people, including myself, tend to look at .arpa and think "oh yes, thats PTR queries" but forget the DNS doesn't have a global rule that ONLY the PTR query can be sent to the domain.
It's just a domain. You can put anything into your zone. A, AAAA, PTR, TXT, you can even put HESIOD records if you want to party like its Kerberos nineteen ninety IV.
by ggm - As the post calls out, most certificate authorities will not issue certs against .arpa domains. I found this out the hard way when paying for CloudFlare's Advanced Certificates add-on for an .arpa domain I had successfully delegated and registered.
They return failures and exceptions when attempting to generate the certificate for the .arpa domain and then I spent months trying to get a refund (they are very slow to respond) and only caved once I threatened a chargeback for the service not working as advertised.
by RKearney