3 ms·

Anything touching the DNS records for the root of your entire web presence is not simple and needs substantial review.

• unethical_ban 3y ago
  Adding a new DNS record for a new, specific purpose is simple and low-impact, technically.
  • UncleEntity 3y ago
    …which gets promptly forgotten about after it’s initial use case and years later your user database gets sold on the internet. How many “low-impact” things have been compromised over the years, I wonder?
    • unethical_ban 3y ago
      Unless you have anyone competent running the DNS config, or have a ticketing workflow of any kind, and I can't figure out what you think a DNS record with a onetime validation token could do if left unmanaged beyond some adversary discovery.
• throwaway60607 3y ago
  That's exactly why DNS verification is a overkill.