Hacker News new | ask | show | jobs
by phamilton 1754 days ago
I've seen this attack with cloudfront and an S3 bucket.

You can verify your domain is going to a cloudfront you own, but it doesn't verify that the origin is a bucket you own.