4 ms·
Ahh thanks. I hope you don’t mind if we boot that one. How do you foresee sub domains being a problem otherwise?
by cjbest 9y ago
Ahh thanks. I hope you don’t mind if we boot that one.
How do you foresee sub domains being a problem otherwise?
- radley 9y agoSEO will see each account as a separate domain, so your primary site ranking will be low. Further, there's too many ways for user subdomains to be mistaken or conflict with company products and promotions. It's usually best to reserve subdomains for company needs — you never know what you'll need 5-10 years from now.
- amasad 9y agoIt's also a potential cross-domain attack vector if you let your users insert arbitrary code. See, for example, why github pages was switched from `.com` to `.io`: https://github.com/blog/1452-new-github-pages-domain-github-io https://github.com/blog/1452-new-github-pages-domain-github-...
- cjbest 9y agoAll really good points. Thanks for the feedback.
- radley 9y agoIt looks like basic https://substack.com https://substack.com link doesn't work without the "www" prefix.
- cjbest 9y agoYes. This is our dns provider not bending the rules to work nicely with Heroku, which doesn’t play well with apex domains (but is handling our SSL.) Would love a tip if anyone knows an easy way to fix this properly.
- fomojola 9y agoYou really should just switch to a DNS provider that does ALIAS-style apex domains like Route 53. GoDaddy as DNS provider will be a mistake you will almost certainly eventually regret, given enough time.
- jlgaddis 9y agoOh wow, GoDaddy for authoritative DNS? Yeah, seriously, spend $1/month and use Route 53 or somebody -- anybody -- else.
- radley 9y agoI also ended up with "mail.substack.com" (along with mail@substack.com) while testing. I couldn't see an admin site, but I did get a confirmation email. Please delete the account (and my apologies for the hassle).
- jlgaddis 9y agoNice. If one can grab "admin", "webmaster", or one of several others, she can also get SSL certificates for the domain.