Everything got enshitified to increase shareholder value.

Give FreeTube a try.

Anyone with $150K to blow can have a vanity TLD it’s not that big a feat. And it’s about as douchy as vanity plates.

No, just weird positional dyslexia

Yes, I’m aware. I said offshoots. I know people who died there fighting these fucks, you’re not teaching me anything.

Russia was aligned with the old regime fighting ISIS and various Islamists offshoots. Russia isn’t aligned with the current regime that was founded by people who lead ISIS at one point and other offshoots. The US is now aligned with these people, which isn’t a that surprising considering they’ve always been fighting both sides.

What are you talking about? Everyone knows Alaska is on the bottom right of the map.

Are you implying that ISIS is a Russian ally?

It wasn’t giving it to Kissinger for his work on the Vietnam war that did it for you?

We’ll talk when protestors in the US are hanging and burning police officers.

People wait yeeeeears in pretrial detention.

While they would crush us military, they would likely end up in a decade long drawn out guerilla warfare. But for that to happen there needs to be some supplies coming in.

Block northern passage of supplies into Canada. They already control the west end.

And Canada.

Are you using a fart puller?

You’re telling me the US had the capability to eliminate any of the worst ones in much more problematic countries and chose not to because there was no oil in it for them? That’s a grim thought.

The call was always coming from inside the house.

Absolutely. Simply use ACME with the DNS validation method. Using bind you’ll want to create keys and allow TXT access for those keys to the validation domains. Fear not, this isn’t exclusive to bind, ACME tools supports dozens of other backends. That’s all you need the actual domain doesn’t need to be resolvable with an A/CNAME record. Internally you can run an entirely different DNS server to resolve your hosts, use hosts files, or use bind zones.

Except it isn’t. Saying it is trivial is just gross generalization. It’s trivial to configure bind to have internal zones that aren’t resolvable publically. It all depends on configuration, such as reverse ns entries, zone accessibility, etc.

You can have (sub)domains that are listed in the certificate lists and yet aren’t resolvable externally as well.

It’d be better and more accurate say the list of certificates then.

Sub domains aren’t public unless your DNS server has XFER on.

Worth noting about this approach is that the global list of subdomains is publicly searchable.

Can you expand on this? What is it that you call the “global list of subdomains”?