im always programming so defensively when in reality nobody will probably even be bothered enough to exploit anything..

i very actively think about ways people could exploit whatever i'm writing but it's easy to get too bogged down too I feel

and you'll probably look over the real exploits yourself anyways lol

someone *could* try to spam mismatched requests to try hit the letsencrypt ratelimit, so I check various things to make sure a domain resolves (and will resolve) properly. would someone actually do this? probably not

someone *could* round-robin multiple A records so I have to check if all of them match our ip, not just the first one

hmmm "Lookup matching error: A record does not match: 159.69.36.55 instead of 159.69.36.55"

i think i made a logic error somewhere lol

ohh right that's what I forgot to add