3 ms·
I don't think there are any solutions to this on a technical level. There's no way for you to prove that you own the domain, besides setting the NS-records. Yo
by vegardx 6y ago
I don't think there are any solutions to this on a technical level. There's no way for you to prove that you own the domain, besides setting the NS-records.
You can partially mitigate the issue the way Amazon does it. But even that isn't foolproof and I suspect they have other reasons than just this for their approach.
- ryan29 6y agoThe way AWS does it seems like it would work if they removed hosted zones for domains where all 4 NS don’t match what you’re assigned. That seems to be what Cloudflare does (I’m not positive though), but with 2 NS per account.
- vegardx 6y agoIt's a smart way to at least make it a lot harder to take over a misconfigured domain this way, but like I said in another thread, I'm not sold on the idea that this is their responsibility. That said, having some safe guards for a common pattern of misconfiguration is always good.