←back to thread

Should you use Let's Encrypt for internal hostnames?

(shkspr.mobi)
238 points edent | 1 comments | 05 Jan 22 12:42 UTC | HN request time: 0s | source
Show context
cure ◴[05 Jan 22 14:36 UTC] No.29809437[source]▶
> OK, so you decide to have an internal DNS - now the whole world knows you have doorbell-model-xyz.myhome.example.com!

Uhm, or you use split horizon DNS? Who in their right mind would leak all their internal DNS names into a public DNS zone?

replies(5): >>29809492 #>>29809549 #>>29809557 #>>29809564 #>>29809694 #
1. edent ◴[05 Jan 22 14:45 UTC] No.29809549[source]▶
Sorry for the poor wording on my part. I meant that if you issue a LE Cert for your doorbell, and give it a "sensible" name, the name will appear in the CT Log.