sayanarijit
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
Exactly... Not possible, yet the UI allows (by allowing "CNAME" with target value as "@"), which is causing a lot of confusion for the not-very-technical people out there. I greatly appreciate that Cloudflare works around this limitation with cname flattening, but it isn't exactly a CNAME, hence shouldn't be called a CNAME.
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
Technically correct... But from an end user point of view, when I add a CNAME record and run
dig -t cname example.com I'd expect a CNAME record.
I think it'd be better if the UI straight out declares that it doesn't support CNAME in root domain, and provide some other option (aname/alias/flattened-cname) to avoid any confusion. Users will straight away know what they can and can't do, rather than doing something and wondering why it isn't working....18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
Though I'm not sure if it's the right place to discuss this...
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
Cloudflare inserts A record instead of CNAME (aka flattening) in the root domain, so I'd assume, it can also insert a TXT record. Hence,
CNAME = A + TXT
Since no CNAME is being served from the root domain, I believe it's possible to do so, using the same logic Cloudflare is already using behind flattening.
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
Unrelated... I wonder how does cloudflare confirm domain ownership... Are all nameserver hostnames unique to the user?
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
In the case of custom domains implementation, we prefer 2 way verification. For e.g.
1. Does the user want to link subdomain.site.com to example.com?
2. Does the owner of example.com want to map it to subdomain.site.com?
Domain is linked when both intentions are confirmed.
Now, subdomain.site.com, sus.site.com both can have the same IP. So the 2nd verification isn't complete. The owner of sus.site.com, if wants to, can claim ownership of example.com in the platform by just registering before the actual owner. To avoid this, the owner of example.com needs to confirm from the dns side that he wants to link it to subdomain.site.com, and not sus.site.com.
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
To verify custom domains, A record should be accompanied by TXT record, and end users aren't very technical to do that. CNAME solves that.
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
yes... For 2 way domain verification for services that provide "custom domain" linking via CNAME records.
18 replies
CDCloudflare Developers
•Created by sayanarijit on 8/29/2023 in #general-help
How to identify if a CNAME is flattened via dig/nslookup?
Exactly... This is why I'd expect a TXT record or something similar that would say "this is supposed to be a CNAME record pointing to example.com, but it has been flattened into A record"...
18 replies