Post #4246828
2026-07-30 16:56 UTC
@TomSellers@infosec.exchange @scottwilson@infosec.exchange i have noticed sometimes rz will associate things with public ip addresses based on a shared tls certificate that includes a hostname.
For instance, if your HA uses a cert shared with my website (for some reason) my website will show up as an asset label in your inventory, and because dns, the ip of my public www will be there too
Replies (1)
-
@TomSellers@infosec.exchange 2026-07-30 17:00
@h2onolan@infosec.exchange @scottwilson@infosec.exchange Yeah, there is a bunch of .. waves hands .. logic and magic but certs cryptographically assert identity so we trust that with some caveats and guardrails. IOW, both assets claimed they are foo.bar.biz so link them. Obviously, load balancers, VIPs, and other tech clouds that but we try to handle that as gracefully as possible.