[marysol5]

CT logs are funny, not enough people know about them. Whenever I speak to people they're shocked to know that "internal" subdomains get exposed through them.

[seethishat]

Wildcard certs were somewhat useful for hiding this. Not sure that's still true.