WebFaction
Community site: login faq

Hello,

Just curious as to why I was able to simply go to my.webfaction.com, add my domain name, create an app at its root, and then start a site based on that app without ever having to provide any info proving that I own my domain name (i.e. a password or something)? My site works, and is up and running, but what if someone used my domain name instead of me? How can I add security or am I missing something?

Any info on this matter would be highly appreciated, thanks.

asked 02 Aug '11, 12:09

tractor
523
accept rate: 0%


Adding your domain to WebFaction and hooking it up to an application does not mean anyone can access your website. For your website to be available to Average Joe there needs to be a public mapping between your domain and the IP-address of your specific WebFaction server. This public mapping cannot be changed without credentials.

The mapping is handled by the DNS and is a two-step rocket. First you have the record in the root servers(1) which mostly just points to an authoritative name server(2) for your domain.

  1. This record is managed by your registrar (where you bought your domain).
  2. This is where the actual mapping to an IP-address is done.

To be reachable for Average Joe the following chain must be complete:

  1. In the root name servers, yourdomain.com must be present and point to an authoritative name server
  2. The authoritative name server must answer questions about yourdomain.com (a typical question would be "tell me the IP address for www.mydomain.com")
  3. Your WebFaction server must be configured to route requests for www.yourdomain.com to the proper application.
permanent link

answered 02 Aug '11, 19:50

dakrer
1813
accept rate: 50%

Thanks, I have a better idea now of how it works.

(03 Aug '11, 13:38) tractor

WebFaction is not a Registrar.

If you don't have access to the domain name via the registrar, then you won't be able to point it to WebFaction's DNS servers. Or any other DNS servers for that matter.

That pretty much shows who has ownership.

permanent link

answered 02 Aug '11, 13:59

bmeyer71 ♦♦
1.5k3613
accept rate: 33%

The domain name system maps domain names to ip addresses on servers. However, this mapping occurs only after I create a webfaction application that points to my domain name (tying the server ip address with the domain name). So once I have done this, no one else would be able to alter the contents of the website at my domain since a mapping already exists? However, before I created the mapping by creating a django application, did a window of opportunity exist where anyone could have mapped my domain to their server ips?

(02 Aug '11, 15:10) tractor

So once I have done this, no one else would be able to alter the contents of the website at my domain since a mapping already exists?

Yes - once you've added your domain to your account, no other user can add it to theirs.

However, before I created the mapping by creating a django application, did a window of opportunity exist where anyone could have mapped my domain to their server ips?

No - if you had already added the domain to your account, then no other user could add it to theirs.

That said, there is a window of sorts: if you do not add your domain to your account at all, then some other user could add it to theirs, which would then prevent you from adding it to your account. If that happens, just open a support ticket and we'll help you sort it out.

(20 Aug '11, 15:12) seanf
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×128
×69
×45

question asked: 02 Aug '11, 12:09

question was seen: 4,849 times

last updated: 20 Aug '11, 15:13

WEBFACTION
REACH US
SUPPORT
AFFILIATE PROGRAM
LEGAL
© COPYRIGHT 2003-2019 SWARMA LIMITED - WEBFACTION IS A SERVICE OF SWARMA LIMITED
REGISTERED IN ENGLAND AND WALES 5729350 - VAT REGISTRATION NUMBER 877397162
5TH FLOOR, THE OLD VINYL FACTORY, HAYES, UB3 1HA, UNITED KINGDOM