How come I was able to add my domain name and create a website on it without providing credentials?

Hello,

Just curious as to why I was able to simply go to my.webfaction.com, add my domain name, create an app at its root, and then start a site based on that app without ever having to provide any info proving that I own my domain name (i.e. a password or something)? My site works, and is up and running, but what if someone used my domain name instead of me? How can I add security or am I missing something?

Any info on this matter would be highly appreciated, thanks.

domain password security

asked Aug 02 '11 at 12:09

tractor
5●2

2 Answers:

oldest newest most voted

Adding your domain to WebFaction and hooking it up to an application does not mean anyone can access your website. For your website to be available to Average Joe there needs to be a public mapping between your domain and the IP-address of your specific WebFaction server. This public mapping cannot be changed without credentials.

The mapping is handled by the DNS and is a two-step rocket. First you have the record in the root servers(1) which mostly just points to an authoritative name server(2) for your domain.

This record is managed by your registrar (where you bought your domain).
This is where the actual mapping to an IP-address is done.

To be reachable for Average Joe the following chain must be complete:

In the root name servers, yourdomain.com must be present and point to an authoritative name server
The authoritative name server must answer questions about yourdomain.com (a typical question would be "tell me the IP address for www.mydomain.com")
Your WebFaction server must be configured to route requests for www.yourdomain.com to the proper application.

answered Aug 02 '11 at 19:50

dakrer
18●2

Thanks, I have a better idea now of how it works.

(Aug 03 '11 at 13:38) tractor

WebFaction is not a Registrar.

If you don't have access to the domain name via the registrar, then you won't be able to point it to WebFaction's DNS servers. Or any other DNS servers for that matter.

That pretty much shows who has ownership.

answered Aug 02 '11 at 13:59

bmeyer71 ♦♦
851●2●3●10

The domain name system maps domain names to ip addresses on servers. However, this mapping occurs only after I create a webfaction application that points to my domain name (tying the server ip address with the domain name). So once I have done this, no one else would be able to alter the contents of the website at my domain since a mapping already exists? However, before I created the mapping by creating a django application, did a window of opportunity exist where anyone could have mapped my domain to their server ips?

(Aug 02 '11 at 15:10) tractor

So once I have done this, no one else would be able to alter the contents of the website at my domain since a mapping already exists?

Yes - once you've added your domain to your account, no other user can add it to theirs.

However, before I created the mapping by creating a django application, did a window of opportunity exist where anyone could have mapped my domain to their server ips?

No - if you had already added the domain to your account, then no other user could add it to theirs.

That said, there is a window of sorts: if you do not add your domain to your account at all, then some other user could add it to theirs, which would then prevent you from adding it to your account. If that happens, just open a support ticket and we'll help you sort it out.

(Aug 20 '11 at 15:12) seanf ♦♦

Your answer

If you have an answer to the above question, then use the form below. Otherwise, use the appropriate 'add new comment' button above to post your feedback.

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Tags:

domain ×74
security ×41
password ×27

Asked: Aug 02 '11 at 12:09

Seen: 927 times

Last updated: Aug 20 '11 at 15:13

How come I was able to add my domain name and create a website on it without providing credentials?

Follow this question

Got questions? We have answers!

Related questions