I assumed that the problem was that if a master is accessible on your intranet, it could be hit with some sort of XSS attack from browsers inside the firewall.
But apparently there are 6000 people just straight up exposing their masters to the internet:
But apparently there are 6000 people just straight up exposing their masters to the internet:
https://gbhackers.com/saltstack-salt/