On 07/03/18 16:27, Norman Walsh wrote:
> Dave Pawson <dave.paw...@gmail.com> writes:
>> Works for me Norm, 1930Z?
>> docbook.org & www.docbook.org?
> It works fine, but it’s http: not https:.
> I can’t make it https: and host it at github.com because they don’t
> support SSL on custom domain names.

Right. Probably because the churn on custom names would mean recreating
the certificate several times a day.

> I’ll port it over to netlify which works. For cdn.docbook.org and
> tdg.docbook.org, it was easy. 

They probably run a wildcard certificate.

> There’s a DNS feature called CNAME that
> allows you to map one domain to another. If you ask DNS about
> cdn.docbook.org, it’ll tell you it’s an alias:

Right. cnames are the lifeblood of ISPs and any org that runs its own
servers and manages its own DNS. My university servers support many
hundreds of these because we allow any dept or project their own cname
as a third-level domain within the university network.
> But I don’t think I can (“I don’t know how to”) make that work for the
> root domain (docbook.org) without changing the nameservers to netlify.

You could ask them to delegate the address but I doubt if they would.

> In theory, changing the nameservers is straightforward. I configure
> the names at netlify, change the DNS NS records, and everything just
> works. 

As a courtesy you could notify the operators of the DNS you are leaving,
if that's not built into your control panel functions.

> In practice, if it isn’t straightforward (“If I [expletive] it up”), I
> don’t want to break someone’s production run at 15:00 on Friday
> afternoon, so I’ll wait until the weekend.

Very wise.

> (Free advice: if you’re relying on the internet for your production
> runs, you’re doing it wrong. But I don’t want to be the guy who proves
> that to you on Friday afternoon!)

There's no problem in relying on the Internet so long as you have a Plan
B. Relying exclusively on a single point of failure is, of course, a
recipe for unwanted occurrences :-)


To unsubscribe, e-mail: docbook-unsubscr...@lists.oasis-open.org
For additional commands, e-mail: docbook-h...@lists.oasis-open.org

Reply via email to