im always programming so defensively when in reality nobody will probably even be bothered enough to exploit anything..

i very actively think about ways people could exploit whatever i'm writing but it's easy to get too bogged down too I feel

and you'll probably look over the real exploits yourself anyways lol

someone *could* try to spam mismatched requests to try hit the letsencrypt ratelimit, so I check various things to make sure a domain resolves (and will resolve) properly. would someone actually do this? probably not