I support your doubts, @AndiU I think we talked about this shortly at the conference. This seems like a security issue if one wants to use TLS registration in practice with larger environments where manual registration is not feasible.
@os-s what’s your take on this :)?
The workaround using a third host to register the tls certificates and distribute them afterwards seems rather complicated as you then need to figure out how this third host gets access to all hosts to be monitored.