Jump to content

Free subdomain on primary domain - security issue?


layz

Recommended Posts

hello fellow whmcs'ers.

 

for the past year i've been giving away free subdomains on exampledomain.com

i then tried editing the settings in whmcs to .primarydomain.com which turned out to work just fine. the upside is that my company name will be in every accounts domain name and thereby giving me a greater public recognizion. i was thinking about the downsides and i can't really think of any. but i am conserned though if there is i a security issue here.

 

please note that the above domains are examples and do not reflect reality.

 

to boil it down; is there a security issue, or any other issues for that matter, in giving free subdomains under the primary domain?

 

 

hope to hear from you soon.

 

 

/ layz

Link to comment
Share on other sites

to boil it down; is there a security issue, or any other issues for that matter

Yes, no, maybe and probably - not necessarily in that order.

 

If the client creates a "subdomain" of www. blah.com they'll mangle up your DNS zone and (config dependant) have their website shown instead of yours

etc

 

Hosting on subdomains is so 1990's now ...

Link to comment
Share on other sites

If the client creates a "subdomain" of www. blah.com they'll mangle up your DNS zone and (config dependant) have their website shown instead of yours

etc

 

Hosting on subdomains is so 1990's now ...

 

 

editing DNS is disabled in the feature list.

etc - like what?

may be so 90's, but they are very popular. i have more customers with free subdomains than i have customers with domains.

Link to comment
Share on other sites

i disagree. providing the free subdomain, people will come to my site and browse my products, even if they only sign up for a free subdomain.

 

for example: there is two schools in my country that use my service to teach how to make websites. all these students now knows about my site. so even if i am giving something away for free, they are still aware of my sites existence. maybe they'll come back another time when they are in need for a paid product.

 

 

NOTE: in #5 that should say primary domain, not primary account.

Link to comment
Share on other sites

One security concern using free subdomains is someone may associate a free subdomain with your company. For example, someone makes a subdomain called "ssl.yourdomain.com" and uses it to collect credit card numbers under your name. The subdomain looks legit, but it could reflect negatively on you as a company. The same goes if someone sets up a spamming forum, illegal, etc website using the subdomain.

 

My suggestion would be to create a white label subdomain for using this, that would reduce the risk of someone associating the account with your company. You could install some type of ad-driven system to automatically place ads on the free subdomains as well.

Link to comment
Share on other sites

i go through all the subdomains once every now and then to check what their intentions are. plus, im not a worldwide host. i only accept people from my country.

 

upside = brand recognizion

downside = negative brand recognizion if used for * etc.

 

but my main concern is still if there is a security risk associated with this. can anyone shed some light on this, please?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated