In online fora, “security by obscurity” is when you disagree with someone. In reality, it’s when the primary control used is restricted, shared knowledge. Famo

In online fora, “security by obscurity” is when you disagree with someone. In reality, it’s when the primary control used is restricted, shared knowledge. Famously back in the day if you knew a phone number and AT&T lingo, you could compromise the phone system. In the case of a public CA, if your hostnames aren’t license plates, the names of servers may provide context useful for an attacker. They also provide an attack vector - the control panel for the CA.