Puppet has been in the legacy mode of treating `CN...
# sig-security
c
Puppet has been in the legacy mode of treating
CN=
as a valid hostname match
$forever
.