CNAME records in place of A records

Doug Barton dougb at dougbarton.us
Sat Nov 7 02:32:52 UTC 2020


On 11/6/20 2:49 PM, Sabri Berisha wrote:
> ----- On Nov 6, 2020, at 2:07 AM, Dovid Bender <dovid at telecurve.com> wrote:
> 
> Hi,
> 
>> Sorry if this is a bit OT. Recently several different vendors (in completely
>> different fields) where they white label for us asked us to remove A records
>> that we have going to them and replace them with CNAME records. Is there
>> anything *going around* in the security aranea that has caused this?
> 
> Security-wise, you should be good. But make sure you're not attempting to deliver e-mail to such a domain; CNAMEs cannot be used in MX records.

Or NS records, since you mentioned it.  :)

Doug


More information about the NANOG mailing list