I’m obviously a fan of LE but a simple self-hosted option with a custom CA would be great for local machines:
- I don’t want every Raspberry Pi/laptop/temp VM/whatever published into the cert transparency record
- Configuring the router to forward every local hostname to the machine’s .well-known would be awful (if my ISP even allowed port 80)
- Exposing local machines to the Internet is an unnecessary degradation of security
I like “heat pump”. It’s a very nice ELI5 name. It’s a pump for heat. A water pump takes water and forces it to where it wouldn’t go naturally. A heat pump does the same.