Comment Comment by NovemberWhiskey It depends on your risk profile, but there are definitely people who'd rather run their own PKI than permit threat actor reconnaissance by publishing internal hostnames to CT logs. parent NovemberWhiskey 2 years ago