3 ms·
What other reasons would this common pattern be used? Laziness. Some of the higher-end platforms create customer specific sub-domains and use sub-domain wildc
by LinuxBender 4y ago
What other reasons would this common pattern be used?
Laziness. Some of the higher-end platforms create customer specific sub-domains and use sub-domain wildcards once that customer is in a particular revenue bracket.
The pattern you mention has gotten many AWS and related platform customers into trouble from sub-domain take-over as humans are good at creating things and quite bad at de-provisioning things despite automation. There are some bug-bounty folks that spend their entire time looking for sub-domain take-over opportunities and I hear it can be quite lucrative.
- theamk 4y agoDomain takeover is only possible if the subdomain is user-specifiable, like with AWS S3. As long as subdomain is random and never reused (pretty simple to do if you incorporate some sort of timestamp in the name generation algorithm) then the takeover is impossible. This is another good reason to generate random subdomain part.