@jonty@chaos.social this should have definitely been a TXT record in the DNS rather than a file on a website

(or force the file to be in .well-known I guess, like Lets Encrypt does)