I wonder if the author realizes that getting public certificates results in them being recorded in CT logs.
Yep. Especially with non-wildcard certs this leaks all service names (privacy concern).
Yep. Especially with non-wildcard certs this leaks all service names (privacy concern).