outworlder 2 days ago

Generally I just get DNS names for those.

It does 'leak' your internal host addresses but that shouldn't be an issue.

tialaramex 2 days ago

No. The certificates are for a claim that this is your IP, but it's not your IP, it isn't anybody's IP.

Same way you can't get a cert for some.name.in-an-internal-domain-we-use-internally

  • marginalia_nu 2 days ago

    > Same way you can't get a cert for some.name.in-an-internal-domain-we-use-internally

    Sure you can, you just have to issue it yourself.