@benjojo I always felt uneasy about the public logging of possibly internal hosts, even from a bssic information disclosure and customer confidentiality perspective. I tend to try and obtain wildcard certs through ACME whenever possible to limit that.

@benjojo I wonder if there’s an argument for logs intentionally delaying availability of new leaves. They have 24h to merge them.

@filippo @benjojo Then they'd just arrive with a 24 hour delay...

@erincandescent @benjojo Which might be too late to use default credentials and take over unconfigured instances

@filippo @benjojo As a sysadmin, I feel torn. On the one hand, a delay might help me if my new server could have issues (but someone might hit it anyway, depending). On the other hand, a delay hurts me if someone has gotten a certificate for one of my hosts, since they have 24 hr+ to use the certificate.

(I tend to come down on the side of 'publish now' in the end, partly because I've seen new web servers get hit right away even before CT logs.)