3 ms·
I’m not sure I grasp the situation. Does this mean that third parties can modify DNS entries?
by cced 7y ago
I’m not sure I grasp the situation. Does this mean that third parties can modify DNS entries?
- segfaultbuserr 7y ago> Does this mean that third parties can modify DNS entries? Not only DNS entries, but 3rd-parties can wiretap/modify arbitrary content in all web pages if you use a CDN. That's essentially how CDNs work, you have to trust a 3rd-party if you detegate your request to a 3rd-party. I'm not saying it's necessarily bad, but there is no other way around. And in case of CloudFlare, the DNS is already fully controlled by CloudFlare.
- hannob 7y agoWell, yes, if you let them. DNS is hierarchical. If your DNS server manages example.com then you can set a delegation for a subdomain - e.g. www.example.com - to someone else. I.e. you could say "for this subdomain the nameservers from google's cloud service are responsible". You can go further and e.g. configure the google cloud service so that abc.www.example.com goes yet to another DNS service. So a company could say "we manage the DNS for our domain inhouse, but for www. we let some other company do it and pay them for it". This is pretty standard.