On Wednesday, October 14, 2026 6:09:06 p.m. Pacific Daylight Time Max Hearnden wrote: > Well done highlighting the risks of static authentication tokens and > CNAME records. > > I noticed that the paper appears to omit another mitigation strategy, > namely using an application specific underscored domain e.g. > _acme-challenge.example.com. Since subdomains aren't affected by CNAME's > in parent domains, ...
could DNAME be used in place of CNAME, since they do affect subdomains? -- Paul Vixie
_______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
