Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You are correct, I've tested it with my own domains. It does not know the ones running with a wildcard certificate for example.


It knows many of the wildcard-served customer subdomains of one of my former employers. (They're probably just scraped from search or something, but a wildcard is not sufficient to prevent discovery.)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: