7 ms·
> OK, so you decide to have an internal DNS - now the whole world knows you have doorbell-model-xyz.myhome.example.com! Uhm, or you use split horizon DNS? Who
by cure 5y ago
> OK, so you decide to have an internal DNS - now the whole world knows you have doorbell-model-xyz.myhome.example.com!
Uhm, or you use split horizon DNS? Who in their right mind would leak all their internal DNS names into a public DNS zone?
- edent 5y agoSorry for the poor wording on my part. I meant that if you issue a LE Cert for your doorbell, and give it a "sensible" name, the name will appear in the CT Log.
- cyberge99 5y agoNamed certs have the hostnames they’re valid for in the Certificate itself. “View Certificate” in a browser, or openssl sclient on cli will show you.
- icedchai 5y agoI don't bother with split horizon DNS for my home network.
- deleted 5y ago[deleted]
- teekert 5y agoThat's in the article, Let's encrypt leaks them for you, if you use them for your intranet.