Domain portfolio management, DNS change tracking, SSL monitoring, and uptime monitoring — in one place.https://domnr.app/https://domnr.app/blog/post-quantum-tls-migration/https://domnr.app/blog/post-quantum-tls-migration/Post-quantum key exchange is already in a third of real HTTPS traffic and most operators never noticed. What X25519MLKEM768 actually changes, why 'harvest now, decrypt later' makes key exchange urgent today, and a practical migration path — plus the half of the problem nobody has solved yet.Tue, 14 Jul 2026 00:00:00 GMThttps://domnr.app/blog/acme-ari-certificate-automation/https://domnr.app/blog/acme-ari-certificate-automation/Surviving short-lived certificates means renewal automation that never blinks. A deep dive into ACME's challenge types and the ARI extension (RFC 9773) — how CAs now tell your client exactly when to renew, how to avoid thundering herds, and how mass revocation stops being a fire drill.Tue, 07 Jul 2026 00:00:00 GMThttps://domnr.app/blog/what-happens-when-you-type-a-domain-name/https://domnr.app/blog/what-happens-when-you-type-a-domain-name/You type a domain, hit enter, and a page appears in under a second. In between, a dozen systems hand off to each other across the internet. Here's the whole journey — DNS, TCP, TLS, and HTTP — explained step by step.Wed, 01 Jul 2026 00:00:00 GMThttps://domnr.app/blog/the-47-day-certificate-era/https://domnr.app/blog/the-47-day-certificate-era/Public TLS certificate lifetimes are collapsing: 200 days today, 100 in 2027, 47 by 2029. Here's the schedule, why it's happening, and what an 8x jump in renewal frequency actually changes for the teams who run certificates.Tue, 30 Jun 2026 00:00:00 GMThttps://domnr.app/blog/domain-management-mistakes-teams-make/https://domnr.app/blog/domain-management-mistakes-teams-make/After watching how teams manage domains, the same expensive mistakes show up again and again — lapsed renewals, scattered registrars, expired certificates, and silent DNS changes. Here are the seven worst, and exactly how to fix each one.Wed, 24 Jun 2026 00:00:00 GMThttps://domnr.app/blog/uptime-monitoring-http-vs-tcp/https://domnr.app/blog/uptime-monitoring-http-vs-tcp/Not all uptime checks are equal. Here's the difference between HTTP and TCP monitoring, how to pick check intervals, and what actually counts as "down."Sat, 13 Jun 2026 00:00:00 GMThttps://domnr.app/blog/ssl-certificate-about-to-expire/https://domnr.app/blog/ssl-certificate-about-to-expire/An expired TLS certificate throws a full-page security warning and can take a site down outright. Here's what to check, and how to stop it from happening by surprise.Tue, 02 Jun 2026 00:00:00 GMThttps://domnr.app/blog/dns-propagation-explained/https://domnr.app/blog/dns-propagation-explained/You updated a DNS record an hour ago and it's still serving the old value. Here's what "propagation" actually is, why TTL controls it, and how to check.Tue, 19 May 2026 00:00:00 GMThttps://domnr.app/blog/why-dns-change-monitoring-matters/https://domnr.app/blog/why-dns-change-monitoring-matters/A single edited DNS record can take a site offline or silently reroute your email. Here's why DNS changes are so easy to miss, and how monitoring catches them early.Tue, 05 May 2026 00:00:00 GMThttps://domnr.app/blog/what-whois-rdap-tells-you/https://domnr.app/blog/what-whois-rdap-tells-you/WHOIS is more than a registrar name. Here's how to read a domain record — expiry, status codes, nameservers — and why RDAP is quietly replacing it.Tue, 21 Apr 2026 00:00:00 GMThttps://domnr.app/blog/never-miss-a-domain-renewal/https://domnr.app/blog/never-miss-a-domain-renewal/A lapsed domain can take a site offline, break email, and even put your name on the open market. Here's a simple system for tracking renewals across every registrar.Tue, 07 Apr 2026 00:00:00 GMThttps://domnr.app/blog/introducing-the-domnr-blog/https://domnr.app/blog/introducing-the-domnr-blog/Why we built a fast, crawlable public surface with Astro — and what you can expect to read here.Tue, 24 Mar 2026 00:00:00 GMT