On: How I use Tailscale

[rendx]

Even without CT, services on standard ports will quickly be discovered on IPv4.

> On a computer with a gigabit connection, ZMap can scan the entire public IPv4 address space on a single port in under 45 minutes.

[straight-shoota → rendx]

This may discover services, but not hostnames. If the server does not disclose them (e.g. in the certificate used on the IP host), an attacker doesn't have much further to go on.