3 ms·
> Realistically you can't entirely deconflict these names. So you always have a risk of shadowing names from the public Internet. It's totally save and legitim
by lixtra 7y ago
> Realistically you can't entirely deconflict these names. So you always have a risk of shadowing names from the public Internet.
It's totally save and legitimate for ycombinator to use secret.ycombinator.com on their intranet without telling anything about it to the outside internet.
- tialaramex 7y agoThose are names you own, and a CA will happily issue you certs for those names (but Let's Encrypt won't without a DNS record saying the name at least exists) The grandparent was, as I understand it, talking about names they don't own, for which you've no assurance somebody else won't own them (on the public Internet) tomorrow. This used to be very common, decades ago Microsoft even advised corporations to do it for their AD, but it's a bad idea.