OTEL-031
TLS 1.0 and 1.1 are obsolete — do not accept them.
OTEL-032
Skipping certificate verification makes TLS meaningless.
OTEL-033
A remote receiver without TLS accepts cleartext telemetry from anywhere.
OTEL-034
A wildcard CORS origin lets any browser on any site push telemetry to this Collector.
OTEL-035
Extensions like basicauth must read credentials from the environment.
OTEL-036
A very large receive size turns any bad client into a memory attack.
OTEL-037
Inlining a private key in the config file puts it into source control.