<div dir="auto">If we re making a list, how about <a href="http://m.sf-lug.org">m.sf-lug.org</a>, etc. For those on the mobile phone platform. ;^)<div dir="auto">Ken</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, May 14, 2019, 9:27 PM Michael Paoli <<a href="mailto:Michael.Paoli@cal.berkeley.edu">Michael.Paoli@cal.berkeley.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Cert(s) obtained & installed, web server reconfigured ...<br>
SF-LUG non-canonicals<br>
http[s]://{[www.]{<a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>,sflug.{org,com,net}},<a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>}/<br>
HTTP 301 redirect to canonical,<br>
paths are preserved as is REQUEST_SCHEME.<br>
$ (for d in <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a> <a href="http://sflug.com" rel="noreferrer noreferrer" target="_blank">sflug.com</a> <a href="http://sflug.net" rel="noreferrer noreferrer" target="_blank">sflug.net</a>; do for s in '' <br>
s; do for w in '' 'www.'; do u=http"$s://$w$d"/; echo "$u" $(curl -s <br>
-I "$u" | sed -ne 's/\r//g;s/^\([Hh][Tt][Tt][Pp][^ ]* <br>
[0-9][0-9]*\).*/\1/p;/^[Ll]ocation: /p'); done; done; done) | sort<br>
<a href="http://sf-lug.com/" rel="noreferrer noreferrer" target="_blank">http://sf-lug.com/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://sflug.com/" rel="noreferrer noreferrer" target="_blank">http://sflug.com/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://sflug.net/" rel="noreferrer noreferrer" target="_blank">http://sflug.net/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://sflug.org/" rel="noreferrer noreferrer" target="_blank">http://sflug.org/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://www.sf-lug.com/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.com/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://www.sflug.com/" rel="noreferrer noreferrer" target="_blank">http://www.sflug.com/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://www.sflug.net/" rel="noreferrer noreferrer" target="_blank">http://www.sflug.net/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="http://www.sflug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sflug.org/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="https://sf-lug.com/" rel="noreferrer noreferrer" target="_blank">https://sf-lug.com/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://sflug.com/" rel="noreferrer noreferrer" target="_blank">https://sflug.com/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://sflug.net/" rel="noreferrer noreferrer" target="_blank">https://sflug.net/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://sflug.org/" rel="noreferrer noreferrer" target="_blank">https://sflug.org/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://www.sf-lug.com/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.com/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://www.sflug.com/" rel="noreferrer noreferrer" target="_blank">https://www.sflug.com/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://www.sflug.net/" rel="noreferrer noreferrer" target="_blank">https://www.sflug.net/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
<a href="https://www.sflug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sflug.org/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
$ (for d in <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a> <a href="http://sflug.com" rel="noreferrer noreferrer" target="_blank">sflug.com</a> <a href="http://sflug.net" rel="noreferrer noreferrer" target="_blank">sflug.net</a>; do for s in '' <br>
s; do for w in '' 'www.'; do u=http"$s://$w$d"/X; echo "$u" $(curl -s <br>
-I "$u" | sed -ne 's/\r//g;s/^\([Hh][Tt][Tt][Pp][^ ]* <br>
[0-9][0-9]*\).*/\1/p;/^[Ll]ocation: /p'); done; done; done) | sort<br>
<a href="http://sf-lug.com/X" rel="noreferrer noreferrer" target="_blank">http://sf-lug.com/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://sflug.com/X" rel="noreferrer noreferrer" target="_blank">http://sflug.com/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://sflug.net/X" rel="noreferrer noreferrer" target="_blank">http://sflug.net/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://sflug.org/X" rel="noreferrer noreferrer" target="_blank">http://sflug.org/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://www.sf-lug.com/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.com/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://www.sflug.com/X" rel="noreferrer noreferrer" target="_blank">http://www.sflug.com/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://www.sflug.net/X" rel="noreferrer noreferrer" target="_blank">http://www.sflug.net/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="http://www.sflug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sflug.org/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="https://sf-lug.com/X" rel="noreferrer noreferrer" target="_blank">https://sf-lug.com/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://sflug.com/X" rel="noreferrer noreferrer" target="_blank">https://sflug.com/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://sflug.net/X" rel="noreferrer noreferrer" target="_blank">https://sflug.net/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://sflug.org/X" rel="noreferrer noreferrer" target="_blank">https://sflug.org/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://www.sf-lug.com/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.com/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://www.sflug.com/X" rel="noreferrer noreferrer" target="_blank">https://www.sflug.com/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://www.sflug.net/X" rel="noreferrer noreferrer" target="_blank">https://www.sflug.net/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
<a href="https://www.sflug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sflug.org/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
$ (for d in <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>; do for s in '' s; do for w in ''; do <br>
u=http"$s://$w$d"/; echo "$u" $(curl -s -I "$u" | sed -ne <br>
's/\r//g;s/^\([Hh][Tt][Tt][Pp][^ ]* <br>
[0-9][0-9]*\).*/\1/p;/^[Ll]ocation: /p'); done; done; done) | sort<br>
<a href="http://sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://sf-lug.org/</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
<a href="https://sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://sf-lug.org/</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
$ (for d in <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>; do for s in '' s; do for w in ''; do <br>
u=http"$s://$w$d"/X; echo "$u" $(curl -s -I "$u" | sed -ne <br>
's/\r//g;s/^\([Hh][Tt][Tt][Pp][^ ]* <br>
[0-9][0-9]*\).*/\1/p;/^[Ll]ocation: /p'); done; done; done) | sort<br>
<a href="http://sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://sf-lug.org/X</a> HTTP/1.1 301 Location: <a href="http://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/X</a><br>
<a href="https://sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://sf-lug.org/X</a> HTTP/1.1 301 Location: <a href="https://www.sf-lug.org/X" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/X</a><br>
$<br>
<br>
<a href="https://www.wiki.balug.org/wiki/doku.php?id=sf-lug:resources_etc" rel="noreferrer noreferrer" target="_blank">https://www.wiki.balug.org/wiki/doku.php?id=sf-lug:resources_etc</a><br>
<br>
Hmmm, I should get around to writing some regression tests and add to<br>
monitoring, so I can quickly detect if any of these "break" due to any other<br>
configuration changes or other changes. My Apache configuration<br>
has gotten a wee bit complex (many domains and virtual (ServerName)<br>
hosts and multiple certs and wiki and Mailman and<br>
(soonish) WordPress ...<br>
# find /etc/apache2 \( -name RCS -o -name '.old*' \) -type d -prune -o <br>
-type f -print | wc -l<br>
295<br>
# find /etc/apache2 \( -name RCS -o -name '.old*' \) -type d -prune -o <br>
-type d -print | sort<br>
/etc/apache2<br>
/etc/apache2/conf-available<br>
/etc/apache2/conf-enabled<br>
/etc/apache2/conf.d<br>
/etc/apache2/mods-available<br>
/etc/apache2/mods-enabled<br>
/etc/apache2/sites-available<br>
/etc/apache2/sites-available/Include<br>
/etc/apache2/sites-available/rewrites<br>
/etc/apache2/sites-enabled<br>
#<br>
<br>
> From: "Michael Paoli" <<a href="mailto:Michael.Paoli@cal.berkeley.edu" target="_blank" rel="noreferrer">Michael.Paoli@cal.berkeley.edu</a>><br>
> Subject: Re: SFLUG.org<br>
> Date: Wed, 10 Apr 2019 23:10:58 -0700<br>
<br>
> I've still not yet heard a consensus or approximation thereof ... yet,<br>
> that [www.]<a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a> should be the canonical (or not ... or when).<br>
> In any case, now with some config changes in place on<br>
> web server, and awaiting delegation of DNS ... once delegated,<br>
> http[s]://[www.]<a href="http://sflug.org/" rel="noreferrer noreferrer" target="_blank">sflug.org/</a><br>
> will at least have somewhere to go:<br>
><br>
> $ curl -s -I --resolve sflug.org:80:198.144.194.238 <br>
> <a href="http://sflug.org/" rel="noreferrer noreferrer" target="_blank">http://sflug.org/</a> | egrep -i '^(HTTP/|Location: )'<br>
> HTTP/1.1 301 Moved Permanently<br>
> Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
> $ curl -s -I --resolve sflug.org:80:2001:470:1f05:19e::3 <br>
> <a href="http://sflug.org/" rel="noreferrer noreferrer" target="_blank">http://sflug.org/</a> | egrep -i '^(HTTP/|Location: )'<br>
> HTTP/1.1 301 Moved Permanently<br>
> Location: <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a><br>
> $ curl -k -s -I --resolve sflug.org:443:198.144.194.238 <br>
> <a href="https://sflug.org/" rel="noreferrer noreferrer" target="_blank">https://sflug.org/</a> | egrep -i '^(HTTP/|Location: )'<br>
> HTTP/1.1 301 Moved Permanently<br>
> Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
> $ curl -k -s -I --resolve sflug.org:443:2001:470:1f05:19e::3 <br>
> <a href="https://sflug.org/" rel="noreferrer noreferrer" target="_blank">https://sflug.org/</a> | egrep -i '^(HTTP/|Location: )'<br>
> HTTP/1.1 301 Moved Permanently<br>
> Location: <a href="https://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">https://www.sf-lug.org/</a><br>
> $ dig @<a href="http://ns1.sf-lug.org" rel="noreferrer noreferrer" target="_blank">ns1.sf-lug.org</a>. +norecurse +short <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. NS<br>
> <a href="http://ns1.svlug.org" rel="noreferrer noreferrer" target="_blank">ns1.svlug.org</a>.<br>
> <a href="http://ns.primate.net" rel="noreferrer noreferrer" target="_blank">ns.primate.net</a>.<br>
> <a href="http://ns1.linuxmafia.com" rel="noreferrer noreferrer" target="_blank">ns1.linuxmafia.com</a>.<br>
> <a href="http://ns1.sf-lug.org" rel="noreferrer noreferrer" target="_blank">ns1.sf-lug.org</a>.<br>
> $ dig @<a href="http://ns1.sf-lug.org" rel="noreferrer noreferrer" target="_blank">ns1.sf-lug.org</a>. +norecurse +noall +answer +nottl <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. A <br>
> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. AAAA <a href="http://www.sflug.org" rel="noreferrer noreferrer" target="_blank">www.sflug.org</a>. A <a href="http://www.sflug.org" rel="noreferrer noreferrer" target="_blank">www.sflug.org</a>. AAAA<br>
> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. IN A 198.144.194.238<br>
> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. IN AAAA 2001:470:1f05:19e::3<br>
> <a href="http://www.sflug.org" rel="noreferrer noreferrer" target="_blank">www.sflug.org</a>. IN A 198.144.194.238<br>
> <a href="http://www.sflug.org" rel="noreferrer noreferrer" target="_blank">www.sflug.org</a>. IN AAAA 2001:470:1f05:19e::3<br>
> $ dig +norecurse +noall +comments +answer +nottl <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. A <br>
> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. AAAA <a href="http://www.sflug.org" rel="noreferrer noreferrer" target="_blank">www.sflug.org</a>. A <a href="http://www.sflug.org" rel="noreferrer noreferrer" target="_blank">www.sflug.org</a>. AAAA | sed -ne <br>
> '/^;.*NX/p;/^;.*FAIL/p;/^;.*ANSWER:/p;/^;/d;/^$/d;p' | sort -u<br>
> ;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 13<br>
> $<br>
><br>
> There are also some other domains in DNS, e.g.:<br>
> [www.][ipv[46].]<a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a><br>
> AXFR is open to all for <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>. from <a href="http://ns1.sf-lug.org" rel="noreferrer noreferrer" target="_blank">ns1.sf-lug.org</a>.<br>
><br>
> Still don't have proper certs there ... that would be after someone<br>
> provides key(s) (securely) and cert(s), etc. ... or after DNS is delegated.<br>
><br>
>> From: "Michael Paoli" <<a href="mailto:Michael.Paoli@cal.berkeley.edu" target="_blank" rel="noreferrer">Michael.Paoli@cal.berkeley.edu</a>><br>
>> Subject: SFLUG.org Re: [sf-lug] Domain administration (broken WHOIS)<br>
>> Date: Sun, 07 Apr 2019 21:02:19 -0700<br>
><br>
>>> From: Al <<a href="mailto:awsflug@sunnyside.com" target="_blank" rel="noreferrer">awsflug@sunnyside.com</a>><br>
>>> Subject: Re: [sf-lug] Domain administration (broken WHOIS)<br>
>>> Date: Sat, 6 Apr 2019 15:43:43 -0700<br>
>><br>
>>> <a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a> - Rick mentioned that it was available so I grabbed it. <br>
>>> I've learned not to wait on those things - it often doesn't end <br>
>>> well.<br>
>>> Now I'll just sit back and listen to the conversation and wait and <br>
>>> see if anyone actually wants to use it. I don't need to own it. <br>
>>> I can<br>
>>> also "point" it somewhere. Doesn't seem yet that there's a definite<br>
>><br>
>> SFLUG.org ... "Of course" ...<br>
>> $ dig +noall +answer +nottl <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>. A <a href="http://www.sf-lug.org" rel="noreferrer noreferrer" target="_blank">www.sf-lug.org</a>. A <br>
>> <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>. AAAA <a href="http://www.sf-lug.org" rel="noreferrer noreferrer" target="_blank">www.sf-lug.org</a>. AAAA <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>. A <a href="http://www.sf-lug.com" rel="noreferrer noreferrer" target="_blank">www.sf-lug.com</a>. <br>
>> A <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>. AAAA <a href="http://www.sf-lug.com" rel="noreferrer noreferrer" target="_blank">www.sf-lug.com</a>. AAAA | sort -k 3b -k 1,1<br>
>> <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>. IN A 198.144.194.238<br>
>> <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>. IN A 198.144.194.238<br>
>> <a href="http://www.sf-lug.com" rel="noreferrer noreferrer" target="_blank">www.sf-lug.com</a>. IN A 198.144.194.238<br>
>> <a href="http://www.sf-lug.org" rel="noreferrer noreferrer" target="_blank">www.sf-lug.org</a>. IN A 198.144.194.238<br>
>> <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>. IN AAAA 2001:470:1f05:19e::3<br>
>> <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>. IN AAAA 2001:470:1f05:19e::3<br>
>> <a href="http://www.sf-lug.com" rel="noreferrer noreferrer" target="_blank">www.sf-lug.com</a>. IN AAAA 2001:470:1f05:19e::3<br>
>> <a href="http://www.sf-lug.org" rel="noreferrer noreferrer" target="_blank">www.sf-lug.org</a>. IN AAAA 2001:470:1f05:19e::3<br>
>> $<br>
>><br>
>> It's not merely as simple as "just point DNS at ..."<br>
>> $ curl -s -I --resolve sflug.org:80:198.144.194.238 <br>
>> <a href="http://sflug.org/" rel="noreferrer noreferrer" target="_blank">http://sflug.org/</a> | egrep -i '^(HTTP/|Location: )'<br>
>> HTTP/1.1 302 Found<br>
>> Location: <a href="http://www.balug.org/" rel="noreferrer noreferrer" target="_blank">http://www.balug.org/</a><br>
>> $ curl -6 -s -I --resolve sflug.org:80:2001:470:1f05:19e::3 <br>
>> <a href="http://sflug.org/" rel="noreferrer noreferrer" target="_blank">http://sflug.org/</a> | egrep -i '^(HTTP/|Location: )'<br>
>> HTTP/1.1 302 Found<br>
>> Location: <a href="http://www.balug.org/" rel="noreferrer noreferrer" target="_blank">http://www.balug.org/</a><br>
>> $<br>
>><br>
>> $ dig +noall +answer +nottl <a href="http://balug.org" rel="noreferrer noreferrer" target="_blank">balug.org</a>. A <a href="http://www.balug.org" rel="noreferrer noreferrer" target="_blank">www.balug.org</a>. A<br>
>> <a href="http://balug.org" rel="noreferrer noreferrer" target="_blank">balug.org</a>. IN A 198.144.194.238<br>
>> <a href="http://www.balug.org" rel="noreferrer noreferrer" target="_blank">www.balug.org</a>. IN A 198.144.194.238<br>
>> $<br>
>> Note that many domains go to that same IPv4 IP - even multiple go to the<br>
>> same IPv6 IP.<br>
>><br>
>> "Of course" sometimes folks forget that with email too. 8-O<br>
>><br>
>> Not to mention certs.<br>
>> $ curl -I --resolve sflug.org:443:198.144.194.238 <a href="https://sflug.org/" rel="noreferrer noreferrer" target="_blank">https://sflug.org/</a><br>
>> curl: (51) SSL: no alternative certificate subject name matches <br>
>> target host name '<a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>'<br>
>> $ curl -I --resolve sflug.org:443:2001:470:1f05:19e::3 <a href="https://sflug.org/" rel="noreferrer noreferrer" target="_blank">https://sflug.org/</a><br>
>> curl: (51) SSL: no alternative certificate subject name matches <br>
>> target host name '<a href="http://sflug.org" rel="noreferrer noreferrer" target="_blank">sflug.org</a>'<br>
>> $<br>
>><br>
>> $ nmap -Pn -r -sT -p 443 --script=ssl-cert <a href="http://www.sf-lug.org" rel="noreferrer noreferrer" target="_blank">www.sf-lug.org</a> | egrep <br>
>> '^\| (Subject Alternative Name|Not valid after):'<br>
>> | Subject Alternative Name: DNS:*.<a href="http://ipv4.sf-lug.org" rel="noreferrer noreferrer" target="_blank">ipv4.sf-lug.org</a>, <br>
>> DNS:*.<a href="http://ipv6.sf-lug.org" rel="noreferrer noreferrer" target="_blank">ipv6.sf-lug.org</a>, DNS:*.<a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>, DNS:*.<a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a>, <br>
>> DNS:<a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>, DNS:<a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a><br>
>> | Not valid after: 2019-05-22T10:05:40<br>
>> $<br>
>><br>
>> I generally do <a href="http://letsencrypt.org" rel="noreferrer noreferrer" target="_blank">letsencrypt.org</a> issued certs. For wildcard certs on<br>
>> that, effectively need control of DNS (need to put specific records in<br>
>> at challenge time).<br>
>><br>
>> "Of course" y'all could always set up your own site with redirection and<br>
>> certs 'n all. ;-)<br>
>><br>
>> Jim Stockford - and a handful of others (myself, Grant Bowman,<br>
>> Kim Davalos, Todd Hawley) have access to edit the <a href="http://www.sf-lug.org" rel="noreferrer noreferrer" target="_blank">www.sf-lug.org</a> site.<br>
>> So, "of course", there are, at least potentially, question(s) of who's<br>
>> got access/control of domain(s), avoiding single points of failure (at<br>
>> least as feasible), who's got access to edit site, how is it backed<br>
>> up, etc. Some folks (myself, Jim Stockford, Grant Bowman) also all have<br>
>> access to edit the <a href="http://sf-lug.org" rel="noreferrer noreferrer" target="_blank">sf-lug.org</a> (& <a href="http://sf-lug.com" rel="noreferrer noreferrer" target="_blank">sf-lug.com</a>) master DNS data (and<br>
>> Jim and myself have access to update registrant<br>
>> DNS (authority/delegation, glue, DNSSEC, ...) with the registrar).<br>
>><br>
>> Anyway, ... maybe I'll wait a bit 'till the dust settles. :-)<br>
<br>
<br>
_______________________________________________<br>
sf-lug mailing list<br>
<a href="mailto:sf-lug@linuxmafia.com" target="_blank" rel="noreferrer">sf-lug@linuxmafia.com</a><br>
<a href="http://linuxmafia.com/mailman/listinfo/sf-lugSF-LUG" rel="noreferrer noreferrer" target="_blank">http://linuxmafia.com/mailman/listinfo/sf-lug<br>
SF-LUG</a> is at <a href="http://www.sf-lug.org/" rel="noreferrer noreferrer" target="_blank">http://www.sf-lug.org/</a> </blockquote></div>