Just curious as to why I was able to simply go to my.webfaction.com, add my domain name, create an app at its root, and then start a site based on that app without ever having to provide any info proving that I own my domain name (i.e. a password or something)? My site works, and is up and running, but what if someone used my domain name instead of me? How can I add security or am I missing something?
Any info on this matter would be highly appreciated, thanks.
asked Aug 02 '11 at 12:09
Adding your domain to WebFaction and hooking it up to an application does not mean anyone can access your website. For your website to be available to Average Joe there needs to be a public mapping between your domain and the IP-address of your specific WebFaction server. This public mapping cannot be changed without credentials.
The mapping is handled by the DNS and is a two-step rocket. First you have the record in the root servers(1) which mostly just points to an authoritative name server(2) for your domain.
To be reachable for Average Joe the following chain must be complete:
answered Aug 02 '11 at 19:50
WebFaction is not a Registrar.
If you don't have access to the domain name via the registrar, then you won't be able to point it to WebFaction's DNS servers. Or any other DNS servers for that matter.
That pretty much shows who has ownership.
answered Aug 02 '11 at 13:59