because some people set up services on internal/private networks, and split horizon DNS is a pain to set up. I typically tell people if they can't connect to s

because some people set up services on internal/private networks, and split horizon DNS is a pain to set up. I typically tell people if they can't connect to services on our VPN, to make sure they're using google's DNS servers because they don't protect against DNS rebinding "attacks."