StartCom will log all issued SSL certificates to public CT log servers

Re:StartCom will log all issued SSL certificates to public C... by jlgaddis on Wednesday March 23, 2016 @07:30PM (#11349233)

RFC1918.

If memory serves, it does say "should not" and not "MUST NOT" (cf. RFC2119). Thus, it's not technically a "violation" to do so but it certainly goes against the recommendations, IMO.

I also "do DNS for a living" (and have been for ~20 years) but I'm sure there's still things that I don't know. This is one of those often overlooked things simply because it isn't that common and one doesn't often see any major issues because of it.

[ Parent | on HN ]

Re:StartCom will log all issued SSL certificates to public C... by kiallmacinnes on Tuesday March 29, 2016 @06:53AM (#11380612)

So it does, I've never noticed this section before:

   Indirect references to such addresses should be contained within the
   enterprise. Prominent examples of such references are DNS Resource
   Records and other information referring to internal private
   addresses. In particular, Internet service providers should take
   measures to prevent such leakage.

[ Parent | on HN ]