Protect from subdomain takeover
E
Emile
CNAME removal can be forgotten when a service is deleted from Render.
Render should:
- Alert us if we are still pointing a CNAME without a corresponding service
- Add a reminder to delete the CNAME when deleting a service
- NOT allow re-use of service name between tenants even when that service has been deleted
- Add a tenant ID subdomain to the onrender.com links (eliminates the problem)
Log In