Did you consider an approach like having matt@mattcorallo.com first resolve _bitcoin-payment.mattcorrallo.com to an LN node’s address via DNSSEC, and then you query that node via an LN onion message for a bolt12 invoice for matt ? For domains shared between many users (eg x.com or visa.com or bankofamerica.com), that might provide substantially better privacy, and might also be easier to deploy since you don’t have to export your list of LN users into your DNS db?