Pup Biru

absolutely this

CSP is also a possibility, but really you’re talking about an internal attack on your own infrastructure: either by infra teams on your production or devs on your infrastructure (or an external malicious actor able to deploy code)… i think that’s just so unlikely that it’s not worthy of concern unless you’re something like a bank

someone mentioned elsewhere, but worth repeating here i think: this already has a merged RFC and apparently someone is working on it

https://github.com/LemmyNet/rfcs/pull/4

saying it bluntly is helping… doomscrolling is the problem, and it might not be easy to fix but it is the actual fix

.local exists for a very specific reason and it’s not meant to be used by regular DNS… people use it for alternate things, but it’s reserved for mDNS

if .internal were to be added, we could start using that instead of overloading!