3 ms·

I run my own internal CA. Would not recommend to anyone that they use publicly-valid letsencrypt certs for internal hostnames, since certificate issuance trans

I run my own internal CA. Would not recommend to anyone that they use publicly-valid letsencrypt certs for internal hostnames, since certificate issuance transparency logs are public and will expose all of the hostnames of your internal infrastructure.

spapas82 5y ago
The article answers that: use wildcard certs instead
- walrus01 5y ago
  I'd put using wildcard TLS for all your internal stuff in the category of unacceptably weird and unnecessary risk