alex34778

5 ms·

1. 1.▲
   by alex34778 2y ago

   As far as I can tell, this issue would be a problem where all of the following conditions are met: 1. Tenants are allowed to create arbitrary subdomains with arbitrary CNAME values 2. Tenants are not authorized to act on behalf of the TLD d
2. 2.▲
   by alex34778 2y ago

   Trying to deploy SaaS apps for customers it sometimes takes 3-4 weeks to get them to make any DNS changes, then at the last minute they CC us into an email with SquareSpace support for some reason (their DNS is on Cloudflare...)
3. 3.▲
   by alex34778 2y ago

   I think the issue is less with SaaS vendors doing cert pinning and more that many SaaS vendors offering deploying on customer domains often rely on those same customers to make the DNS changes for validation, and whenever you introduce anot
4. 4.▲
   by alex34778 2y ago

   Regarding "the right thing overall would be them running their services correctly", what was it that they did incorrectly? Managing certificates for 3rd party domains through DNS validation is inherently going to be slow because y
5. 5.▲
   by alex34778 2y ago

   It looks that they provide SaaS solutions with FQDNs on client domains, so you have algeus.client1.com or algeus.client2.com, etc. The problem then is that they'd have to coordinate with IT at each of those clients to complete DNS vali