• 0 Posts
  • 15 Comments
Joined 3 years ago
cake
Cake day: June 25th, 2023

help-circle



  • AI slop

    I’d like to be clear what you’re referring to, because I only know two things Valve is allowing in that regard

    1. Games using GenAI are allowed on steam, but disclosure is required, which is a position I appreciate.
    2. Steam hosts promotion events organized by third parties, where banners are displayed, a special page is available, and a lot of games go on sale - in those events (and AFAIK, none of Valve’s own events) promotional art is displayed that is submitted by those third parties, and sometimes has blatant GenAI use

    Is there something else I’m unaware of? Because otherwise I guess it’s a matter of where you draw the line, because I’d still consider Steam the best platform available, and have to agree to disagree.


  • Jet says the following

    If you want https it’s gotta be a external DNS record anyway, might as well point to internal ips

    My point is, the A record, the one pointing to an IP address, doesn’t need to be public/external, it’s not needed for the wildcard cert, so it can be kept internal.

    I’m mentioning the other challenge trying to make it clear why the record matters for that, and not for a wildcard cert, sorry if that just made things more confusing.


  • Perhaps a better analogy is a painter who has no idea what their canvas is made out of; they know it’s a canvas, they know it’s for painting, they’re faintly aware they’re using some material stretched over a frame, but they just assumed a canvas is a canvas and they just never considered there might be other options than the one they’ve been getting.


  • The point is, the challenge doesn’t require a public DNS A record pointing to your IP, it’s not involved in issuing a wildcard certificate. It requires you to control DNS records for the domain to issue a temporary TXT or something record to prove it, one which you can remove afterwards. This was my point in the original comment.

    It’s A and AAAA records that are used when you open a website in a browser to map the domain to an IP address, the ones I’m saying don’t need to be public.

    The challenge dosent require your site to be public only the DNS to be public.

    And just to be clear, that was describing a different kind of challenge, the simpler one which most people probably use, and which does actually involve A records.


  • I’m a bit confused by what you’re saying, because to my knowledge the DNS entry you’re mentioning won’t help with getting a certificate at all. Challenges will typically require either having the DNS entry point to a publicly reachable website (doesn’t get you wildcard) or proving the ability to modify records for the domain by adding something like a TXT record on the fly, which shouldn’t require A/AAAA records.

    So you should be able to do the second type of challenge without a global A record to get a wildcard certificate, and use local DNS for the A record?





  • It’s a copypasta because somebody commented that, seemingly unironically, somewhere at some point and people found it so funny they started copying it around.

    It’s funny in this post because of the meme and the ridiculousness - you start reading the comment with the example short phrases to send in an emergency, and instead get a ridiculously long text you recognize as a copypasta.



  • If you want https it’s gotta be a external DNS record anyway

    Not sure what you mean by that, but off the top of my head, you can get certificates via challenges that prove DNS control (rather than checking if the DNS points to your server), and you can get wildcard certificates so you don’t even have to expose the existence of subdomains.

    And that’s ignoring the option of using your own CA, which only really works with your own devices, but for local access might be viable.