It's been over half a year and the Internet still seems to be working.

Here's your regular reminder that #cname in #x509 is almost always irrelevant for the validation. If someone is using it, they are doing it wrong.

Wieder zurück ausm Urlaub. Aber mal was anderes:

Hier gibt es doch viele, die bei #Hetzner hosten, ja? Und da nutzen doch auch viele #WordPress ja? Und vielleicht ist da auch wer mit #MailPoet darunter und könnte mir weiterhelfen.

Ich soll zwei #CNAME-Einträge für MailPoet anlegen. Und bei Hetzner in der DNS-Konsole hab ich das richtig angelegt. Mit "dkim1.sendingservice.net" als Wert. Bei MailPoet kommt das an mit meiner Domain dahinter, also "dkim1.sendingservice.net.henning-uhle.eu". Wieso passiert das? Und wie stelle ich das ab?

Vielen Dank schonmal. Und gern #boost und so.

So something really weird happened today. I received an abuse report for a dormant domain I have.

The report pointed to a CNAME subdomain pointing to [org].github.io. The org is still there, the repository that was serving that subdomain is still there, but accessing it led to a phishing page.

Anyone has seen anything like that? No activity on the github organisation, nothing on audit logs of the affected domain. Nothing makes sense.

#github #infosec #dns #cname #phishing

New post: How to Set Up Free SSL For Your Websites (Cloudflare!) Why is SSL important for websites?

You’ve probably notice https://junsungwong.com/2025/08/27/how-to-set-up-free-ssl-for-your-websites-cloudflare/ #ARecord #BeginnerFriendly #Cloudflare #CNAME

I was told that I'm too dumb to understand the threat of putting IP addresses in #x509 #cname, and after two months, the Internet seems to be working just fine.

在 #DNS 体系中，注册商处填写的 NS 记录与权威服务器上返回的 #NS 记录扮演着不同但关联的角色：

注册商设置的 NS 记录构成了域名的委托链，它是全球递归解析器寻找权威服务器的起点，决定了 谁被信任来回答这个域名的查询；而权威服务器自身在响应时返回的 NS 记录，则属于该区域的区域数据，通常用于通知下游服务器该域的权威来源，常见于区域传输或缓存更新。

尽管 RFC 建议两者保持一致以确保清晰和可维护，但技术上并不要求强制同步 —— 只要权威服务器能正常响应查询，即使其返回的 NS 记录指向一个未注册或看似荒诞的域名，递归解析器仍会接受其提供的 A、#CNAME 等答案。因此，你可以在注册商处安全使用真实、可达的 NS 名称，同时在自己的 zone 文件中保留个性化的 NS「签名」，作为一种无害而有趣的极客彩蛋。

Während ich mir die Performancergebnisse zu meinem metalhead.club CDN angesehen habe, ist mir aufgefallen, dass die Namensauflösung einen beträchtlichen Teil der Ladezeit für internationale User ausgemacht hat.

Woran lag's? An CNAMES!

Wieso CNAMES problematisch sein können, erfahrt ihr in diesem zweiten Blogpost, den ich während meiner Arbeiten am CDN geschrieben habe:

"Globale DNS-Auflösung durch Verzicht auf CNAMES beschleunigen" -
https://thomas-leister.de/globale-dns-aufloesung-beschleunigen-cname/

#metalheadclub #blog #dns #cname #nameserver #performance #cdn #mastoadmin #mastodon

CNAME record still not updated even in the authoritative DNS server :dragnsad:

#dns #cname #cname_record

wut - back with a vps again - i hope to get vpn and r proxy working quickly and then probably quite a few subdomains if i can remember how to get dns names working with the right @ and * #cname

#Dnsmasq 2.91 has been released (#DNS / #AAAA / #CNAME / #PTR / #DNSSEC / #DHCP / #DHCPv4 / #DHCPv6 / #BOOTP / #TFTP / #PXE) https://thekelleys.org.uk/dnsmasq/doc.html

A, CNAME, ALIAS, and URL Records each have their own uses! Dive into the world of DNS with our comprehensive video guide to the differences between A, CNAME, ALIAS, and URL records 👉 https://youtu.be/mn07RUxAJRA

#dns #cname #alias #url

Fix DNS Resolution Errors and Improve Your Website's Crawlability
Discover the impact of DNS resolution errors on your website's search engine ranking and learn actionable steps to improve crawlability and optimize your SEO.

DNS resolution errors are a common but often overlooked technical SEO issue that can significantly impact your website's visibility in search results.
READ MORE- https://www.seosiri.com/2024/08/dns-resolution.html
#DNS #CNAME #SEO

The cheapest and most reliable way to host a static site is hands-down from an AWS S3 bucket. But you almost need a PhD to set it up with a custom domain and HTTPS, so hopefully this blog post helps anyone wanting to go down this avenue!

https://www.tobyscott.dev/posts/s3-hosting

#AWS #S3 #CloudFront #CDN #HTTPS #CICD #GitHub #Cloud #Hosting #Cloud #DevOps #Serverless #Scalability #Security #ManagedServices #React #HTML #CSS #JavaScript #SSL #DNS #CNAME #CertificateManager #CloudFlare #LoadBalancer

TIL about DNS flattening is a technique used to resolve a DNS query that involves a CNAME record pointing to another domain. Instead of returning the CNAME record itself, DNS flattening resolves the final destination of the CNAME record and returns an A or AAAA record with the IP address associated with the final domain. This helps in reducing the number of DNS lookups required, improving performance, and preventing CNAME dangling

https://adil.medium.com/why-use-dns-alias-record-instead-of-cname-in-the-cloud-ca995b7a364d

#DNS #DNSflattening #cname #security #cloud

Route 53 Resolver DNS Firewall 的 chain 處理

在「Stop the CNAME chain struggle: Simplified management with Route 53 Resolver DNS Firewall」這邊看到的新功能。

說實話... 我早就忘記 Route 53 Resolver DNS Fir

https://blog.gslin.org/archives/2024/05/09/11788/route-53-resolver-dns-firewall-%e7%9a%84-chain-%e8%99%95%e7%90%86/

#AWS #CDN #Cloud #Computer #DNS #Murmuring #Network #Security #Service #53 #amazon #aws #cdn #chain #cloud #cname #dname #dns #firewall #record #resolver #route #security #service

Timeweb Cloud CLI. Часть 1: S3

Салют! Не так давно компания Timeweb Cloud выпустила новую версию своего CLI (twc), который позволяет легко и удобно управлять всеми предоставляемыми ресурсами облачной платформы. В этой серии статей рассмотрим основные сценарии применения этого инструмента. В данном материале речь пойдёт о работе с облачным объектным хранилищем S3 — это сервис для хранения любых данных в виде объектов, работа с которым осуществляется через программный интерфейс S3 API, в нём можно размещать любые типы статических данных. Они будут храниться в одном месте и едином формате, и вы сможете в любой момент получать к ним доступ через API или графический интерфейс. Удобно размещать там, например, бэкапы, статические и медиа файлы, архивы, логи.

https://habr.com/ru/companies/timeweb/articles/791148/

#timeweb_статьи #cloud #cli #s3 #API #python #terraform #ssl_сертификаты #cname #s3cmd #rclone

First time using nearlyfreespeech.net - #DNS is a little different. It's the first time I've intentionally used a #CName record, I think (since I use a 3rd party DNS). Looks like you can't use, for example programmingismagic.com via CNAME - but I can with www.programmingismagic.com via https://members.nearlyfreespeech.net/faq/?q=DNS#DNS

For the root domain (programmingismagic.com - no www) I have to use the IP address for my site and A/AAAA (IPv4/6)

#BuildingInPublic #NearlyFreeSpeech

@HaraldKi Deine Idee klingt in meinen Ohren unnötig kompliziert. Die doofe Domain kann man auch mit einem #CNAME DNS-Eintrag verstecken.