(shkspr.mobi)

238 points edent | 1 comments | 05 Jan 22 12:42 UTC | HN request time: 0.212s | source

Show context

cure ◴[05 Jan 22 14:36 UTC] No.29809437[source]▶

> OK, so you decide to have an internal DNS - now the whole world knows you have doorbell-model-xyz.myhome.example.com!

Uhm, or you use split horizon DNS? Who in their right mind would leak all their internal DNS names into a public DNS zone?

1. cyberge99 ◴[05 Jan 22 14:45 UTC] No.29809557[source]▶

Named certs have the hostnames they’re valid for in the Certificate itself.

“View Certificate” in a browser, or openssl sclient on cli will show you.

Should you use Let's Encrypt for internal hostnames?