5 ms·

I was working for a company that had hundreds and thousands of domains. It was a fortune 50 company, and they had a policy generally against wildcard domains.

SpaceNugget 12d ago
What do you mean wildcard domain? Are you perhaps confusing domain renewals with dns entries?
- AznHisoka 12d ago
  Not OP, but I am guessing they have domains like fordcareers.com or fordsecurity.com instead of careers.fore.com or security.ford.com, etc
  - jaggederest 12d ago
    Exactly what they did in many instances.
  - arcfour 12d ago
    This really grinds my gears, way more than it should for some reason. Use the system as it was intended, people!
    - jaggederest 12d ago
      Far from the most frustrating thing they did, trust me. I could tell you stories for days and never run out of more frustrating anecdotes.
    - dpark 12d ago
      Sometimes you don’t want everything hanging off the main domain, because if DNS gets horked everything goes down.
- jaggederest 12d ago
  Instead of registering foo.com, and having bob.foo.com, they would register bobfoo.com - they had hundreds or thousands of certs, as a result, and had to renew them all annually or biannually. We didn't even manage all of the domains, we just had to renew the ones our group was responsible for, and it was in the dozens, and each form was ~30-40 actions to fill out correctly. I forget whether they were quarterly or we just ended up doing it all the time, but it was a maddening task. Part of the explosion was that domains were not just in one TLD, they were bobfoo.com bobfoo.bar bobfoo.xyz and in many cases regionalized to bobfoo.co.uk or whatever. It wasn't "domain hoarding", because if you registered bobfoo.info you'd just get UDRP'd by corporate anyway, and nobody really wanted domains of the form somelongnamebobfoo.com This was also before something like LetsEncrypt where you could automatically generate certs for programmatic usage, so they were all done manually.
  - ShinyLeftPad 10d ago
    > nobody really wanted domains of the form somelongnamebobfoo.com You'd be surprised and renewing annually is a great way to accidentally forget some of these and let someone use them to hack your customers
lqstuart 12d ago
I really wish I could be this stupid and have enough power to make such stupid policies
- jaggederest 12d ago
  I felt the same way at the time. Now, I believe we have better things to spend our collective time and energy on.

SpaceNugget 12d ago

What do you mean wildcard domain? Are you perhaps confusing domain renewals with dns entries?

AznHisoka 12d ago
Not OP, but I am guessing they have domains like fordcareers.com or fordsecurity.com instead of careers.fore.com or security.ford.com, etc
- jaggederest 12d ago
  Exactly what they did in many instances.
- arcfour 12d ago
  This really grinds my gears, way more than it should for some reason. Use the system as it was intended, people!
  - jaggederest 12d ago
    Far from the most frustrating thing they did, trust me. I could tell you stories for days and never run out of more frustrating anecdotes.
  - dpark 12d ago
    Sometimes you don’t want everything hanging off the main domain, because if DNS gets horked everything goes down.
jaggederest 12d ago
Instead of registering foo.com, and having bob.foo.com, they would register bobfoo.com - they had hundreds or thousands of certs, as a result, and had to renew them all annually or biannually. We didn't even manage all of the domains, we just had to renew the ones our group was responsible for, and it was in the dozens, and each form was ~30-40 actions to fill out correctly. I forget whether they were quarterly or we just ended up doing it all the time, but it was a maddening task. Part of the explosion was that domains were not just in one TLD, they were bobfoo.com bobfoo.bar bobfoo.xyz and in many cases regionalized to bobfoo.co.uk or whatever. It wasn't "domain hoarding", because if you registered bobfoo.info you'd just get UDRP'd by corporate anyway, and nobody really wanted domains of the form somelongnamebobfoo.com This was also before something like LetsEncrypt where you could automatically generate certs for programmatic usage, so they were all done manually.
- ShinyLeftPad 10d ago
  > nobody really wanted domains of the form somelongnamebobfoo.com You'd be surprised and renewing annually is a great way to accidentally forget some of these and let someone use them to hack your customers

lqstuart 12d ago

I really wish I could be this stupid and have enough power to make such stupid policies

jaggederest 12d ago
I felt the same way at the time. Now, I believe we have better things to spend our collective time and energy on.