| 21 Oct 2025 |
 hexa (signing key rotation when) | no, that issue was only affecting ALIAS records for resolvers that were directed to the milano pop of Gandi | 23:02:38 |
| hexa (signing key rotation when) | and we only had alias records on the apex, since we can't have CNAMEs there | 23:02:59 |
| 22 Oct 2025 |
 vcunat | MX is on the apex, but ALIAS is only about address records, so I don't think MX queries were affected. | 05:19:50 |
| vcunat | Man, Gandi support is being really unhelpful about the ALIAS issue. | 05:29:29 |
 emily | I heard Gandi has gone downhill the past years... | 14:21:07 |
| hexa (signing key rotation when) | it has | 15:47:38 |
| hexa (signing key rotation when) | their motto for a long time was "No bullshit" | 15:48:01 |
| hexa (signing key rotation when) | dnscontrol maps an alias to a cname on a non apex name | 15:52:39 |
| hexa (signing key rotation when) | sigh | 15:52:42 |
| hexa (signing key rotation when) | I'm going to sacrifice nix.dev ig | 15:52:50 |
 Jeremy Fleischman (jfly) | Have we considered moving websites to be under www.<whatever>? | 17:15:32 |
| hexa (signing key rotation when) | something for marketing to decide | 17:17:40 |
| hexa (signing key rotation when) | this breaks all kinds of search engine entries | 17:17:48 |
| hexa (signing key rotation when) | aiui | 17:17:54 |
| hexa (signing key rotation when) | but right now they're investigating alternatives to netlify where we can just point to ip addresses | 17:18:15 |
| vcunat | It does? I'd assume that you still keep the non-www variant as a slow-ish http redirect. | 17:19:15 |
| hexa (signing key rotation when) | yeah, but the url changes, you get duplicated content in the cache | 17:19:39 |
| hexa (signing key rotation when) | vague memories here | 17:19:42 |
| vcunat | Yes, you want the URL to change. | 17:19:56 |
| vcunat | (and avoid using the non-www variant) | 17:20:10 |
| hexa (signing key rotation when) | yes, but with the understanding what that means for our web presence | 17:20:18 |
| vcunat | * (and avoid using the non-www variant in links, etc.) | 17:20:21 |
| hexa (signing key rotation when) | which is not infra's job | 17:20:22 |
| hexa (signing key rotation when) | feel free to suggest that to marketing though | 17:20:55 |
| vcunat | Is there a problem with the current setup, though? | 17:23:33 |
| vcunat | I haven't heard it being slow - or not much of any feedback really 😅 | 17:24:02 |
| hexa (signing key rotation when) | just the ALIAS record imo | 17:24:19 |
| hexa (signing key rotation when) | which means they resolve it from various pops around the world and that can fail | 17:24:32 |
| vcunat | I mean now, without the ALIAS. Or is it back already? | 17:24:43 |
| hexa (signing key rotation when) | in this case it was their pop in milano that couldn't resolve nixos-homepage.netlify.com apparently | 17:24:47 |
