News for hackers. Stuff that matters.
Re:TLS certificates for internal services done right by vaughnegut on Friday July 10, 2026 @07:31AM (#48858495)
Why not? It's easy to set up and manage and it just points at an internal IP address
Re:TLS certificates for internal services done right by Walf on Saturday July 11, 2026 @05:07AM (#48870216)
I consider that an unnecessary leak of private topology, it's not info that needs to be public. IPv6 addresses are not really ever internal, and an exploitable vulnerability in a firewall product leads to the possibility of a directly addressable target. Guessing a v6 address without a name pointing to it is impractical at best.