[BlueOnyx:15035] Re: SSL change after updates?

gkuhnert at compassnetworks.com.au gkuhnert at compassnetworks.com.au
Fri Mar 28 05:48:13 -05 2014



Sent from my iPad

> On 28 Mar 2014, at 1:53, "Michael Aronoff" <maronoff at gmail.com> wrote:
> 
> Eric Wrote:
>> Bind can use wildcards.  
> 
> Keep in mind that if you use wildcard the way you propose people could start
> using unauthorized links to your sites.
> 
> Say you run company.com, someone could use a link like assholes.company.com
> or crap.company.com and those links would work!

Not totally correct. One implementation I have seen on drupal presents a totally different site for each subdomain. If a hostname does not exist, it does a 403 type error. Basically, it moves the vhost configuration layer into drupal.

Regards,
Greg.





More information about the Blueonyx mailing list