Mention potential Certificate Transparency leakage of .onion names in certificates
We got a bug report in our HackerOne bug bounty program mentioning that .onion names might unintentionally get leaked due to Certificate Transparency if .onion owners use HTTPS for their .onions. It might be worth taking this into account on our page about HTTPS and .onions and add a note/warning on it somewhere.
Edited by Georg Koppen