Camera

This security feature enforces a policy that prevents a CNAME DNS record from being configured to point to a resource owned by a different user account on the platform. It is a critical safeguard for administrators and account owners who need to maintain strict control over their domain configurations and prevent unauthorized linking or potential hijacking attempts.

• Cross-Account CNAME Blocking: The system automatically detects and blocks attempts to create a CNAME record that resolves to a hostname or resource in another user's account.
• Security Policy Enforcement: This is not a user setting but a platform-wide security rule designed to prevent domain spoofing and unauthorized resource associations.
• Clear Error Messaging: When a violation occurs, a specific error (like Error 1014) is displayed to the requester, indicating a 'CNAME Cross-User Banned' condition.
• Resource Integrity: Protects the integrity of custom domains, particularly for services like R2 object storage, by ensuring a domain can only point to resources within its own account.
• Administrative Control: Provides account owners with the assurance that their domains and linked resources cannot be co-opted by external parties through DNS record manipulation.