4 ms·

"The net result is that CT gives us visibility into all web certificates [...]" including not always the desirable effect of publishing information on hosts in

• tialaramex 4y ago
  It's true that sometimes somewhere up in management tier people are annoyed to discover that non-Corp employees can find out about the DNS name product-we-bought.internal.corp.example and thus might intuit that Corp bought Product-we-bought. Or even, less often, that big-city.branches.corp.example exists even though they haven't officially launched the new Big City branch of Corp. And it's true that CT is one of the various ways people might discover that although it's probably not even the easiest. But honestly did you consider calling that purpose-of-software.internal.corp.example instead? And maybe at least use code names for projects that are actually secret? Instead of normandy-invasion.corp.example at least call it overlord.corp.example and now it's not obvious where you're landing and I won't have lined up all the tanks and guns ready.