plateee

That’s what is so crazy about this - look at a topographical map of Iran - there’s mountains literally everywhere.

Iran Topography

The best non-air dropped approach is the strait of hormuz (which I’m sure is heavily protected).

That’ll be part of the “concessions” that foreign made routers make to get approval.

Why the fuck else would the department of defense need to weigh in?

I do DNS challenges with let’s encrypt for either host fqnds (for my kubes cluster) or wildcard for the few other services.

The trick is to do a subdomain off of a domain that you own (e.g. thing.lan.mydomain.com) this way, you can scope the DNS to only *.lan.mydomain.com if you’re conscious about scoped api security.

Using let’s encrypt is nice because you can have a valid ssl chain that android, iOS, windows, and Linux all trust with their default trusts without having to do something with a custom CA (ask me how awful that process can be).