Hacker News new | ask | show | jobs
by manigandham 1755 days ago
The point is that without domain verification, it won't stop someone else from registering that bucket (which is what happened with the domains in this article).
1 comments
ctvo 1755 days ago
The point is that S3 isn't a CDN. If you use it as a CDN, it's on you to ensure it'll work for your use case. CloudFront, however, is a CDN, and as expected, has domain verification.
link
manigandham 1755 days ago
Whether it's a CDN is irrelevant. This is already a supported use-case for S3 which is why it even has this functionality.

It's one of many products that supports serving under custom hostnames and all such products should have domain verification.

link
ctvo 1755 days ago
I take it back. S3 outlines this exact use case: https://docs.aws.amazon.com/AmazonS3/latest/userguide/IndexD...

Because of this, I agree, they should verify domain ownership to help protect their users.

link