@bradfitz ("Brad Fitzpatrick") retweeted:
The fact that the web’s “certificate transparency” requirements reveal your private hostnames is the reason we can’t auto-generate certs for every host. Grumble.
with quote tweet:
I analyzed the public hostnames of @Tailscale's `tailscale cert` users: https://smitop.com/post/hostnames/