|
|
|
|
|
|
by lukevp
1932 days ago
|
|
|
> Another variant of this is, some DNS nameservers (like Cloudflare) flatten CNAME records (aka transparently ALIAS endpoints) AFAIK, cloudflare only flattens CNAMEs at the root level, and that’s because CNAMEs at the root are not a standard. They have to convert it to an A record to be standards compliant. |
|
|
Cloudflare nameservers also flatten CNAMEs pointing to workers.dev (a domain they own), for example.
My intention was to point out that nameservers that flatten CNAMEs render DNS-based blocking ineffective.