5 ms·
> Stay within the cloud provider's ecosystem as much as possible, including for domain registration and DNS Alas, if you follow this advice to mitigate this pa
by teractiveodular 2y ago
> Stay within the cloud provider's ecosystem as much as possible, including for domain registration and DNS
Alas, if you follow this advice to mitigate this particular risk, you're completely hosed if your cloud account gets taken down or compromised. Which is why the standard advice is to do exactly the opposite and make sure your domains and DNS are separate from your cloud provider.
- quacksilver 2y agoWhat if you have your domain registered outside of your cloud provider, but have your nameserver on your cloud provider's infra. You can have another cloud platform configured with a duplicate nameserver, then go to your registrar and change the nameserver for your domain.Your replacement nameserver would then control any subdomain provisioning. I think that would deal with the risk somewhat, though could be missing something.
- ivan_gammel 2y ago> your cloud account gets taken down or compromised In risk assessment this risk should be resolved as „avoid“, because loosing DNS will be the secondary concern. Data is even more important. I agree that domains should be registered elsewhere and it’s good idea to have the backup of the zone.