For private networks, anyone can cause a network membership cert to be pushed to them. This is not an issue right now as the cert contains nothing important or private, but in the future if we support things like geolocation certs this would become a privacy problem. So in the future we do need a mechanism of restricting this to only peers that have some claim on network membership, or maybe encrypting it somehow.
Another possibility would be to make sure that any privacy-sensitive info in a cert is encoded in some privacy-preserving or anonymizing way. This is more in line with the concept of a certificate, which in crypto is generally okay to be public information.
For private networks, anyone can cause a network membership cert to be pushed to them. This is not an issue right now as the cert contains nothing important or private, but in the future if we support things like geolocation certs this would become a privacy problem. So in the future we do need a mechanism of restricting this to only peers that have some claim on network membership, or maybe encrypting it somehow.
Another possibility would be to make sure that any privacy-sensitive info in a cert is encoded in some privacy-preserving or anonymizing way. This is more in line with the concept of a certificate, which in crypto is generally okay to be public information.