I hate fucking snap. It might be enough to make me switch distros if Ubuntu keeps up with it (which I am sure they intend to).

The continual “you have new snaps” or whatever it was message every time I’m just trying to have a web browser open made me eventually figure out how to install firefox for real on all of my computers.

Maybe I’m missing something then, how would you pass a DNS challenge?

I agree, if you’re putting your internal domain names into the public DNS you do not need a star cert.

I agree that this is a good idea, but I wanted to add that if someone owns a domain already, they can also use that internally without issue.

If you own a domain and use Let’s Encrypt for a star cert, you can have nice, well secured internal applications on your network with trusted certificates.