`.internal` is now official, finally!
https://www.theregister.com/2024/08/08/dot_internal_ratified/
`.internal` is now official, finally! https://www.theregister.com/2024/08/08/dot_internal_ratified/ 17 comments
@marie @arichtman @Sqaaakoi *one Wikipedia article later* and ah-ha! Thank you, I've officially learned about something new today @WeirdAlex03 @arichtman yeah, because wide adoption for internal use didn't stop icann from handing .dev to google - with HSTS preload for the entire top level too to pour some extra salt into that wound. @WeirdAlex03 @arichtman .local is for link local multicast DNS (aka zeroconf or Bonjour). It's generally a bad idea to provide a .local zone via unicast DNS, since it'll cause most systems to disable multicast DNS. @jamesh @WeirdAlex03 @arichtman @wdormann @WeirdAlex03 @arichtman Yep. If you forced mDNS on for a particular system, it likely wouldn't ever query any of your unicast .local names. Things likely worked for you because most systems these days will query the SOA record for "local." via unicast: if they get a hit, they disable mDNS. @arichtman Finally! The best time to have done this would have been 30 years ago. The second best time is now. (They should have also reserved .lan at the same time, hrpmf.) @arichtman I don't really see the difference between `.internal` and `.local`. Can someone please explain? @Razemix @arichtman .local is used for mDNS functions, .internal is commonly used for non-mDNS functions @arichtman because a few people are asking: .local was never officially reserved for internal networks and is (ab)used by the bonjour/mDNS protocols to do hostname resolution when no TLD is specified. .internal is now the recommended way to get a TLD for your internal networks. However you will need to use a custom CA if you want TLS to work, or buy a domain and use public CAs if you don't control every device that will connect. @arichtman |
@arichtman Not strong on my DNS knowledge, what's the difference between .internal and .local?
I could already use .local addresses instead of 192.168.*.* for stuff like Home Assistant and OpenMediaVault
Is it just that those were two of many unofficial options and only .internal was made official?