: Is an externally-hosted subdomain a security risk? A company I've been developing a web site for wants to keep their current domain, which is something like company.parentcompany.com. Because we

A company I've been developing a web site for wants to keep their current domain, which is something like company.parentcompany.com. Because we wanted to use a different CMS, the parent company refused to support or even host it and asked us to pay for third-party hosting.

Now that we've done that, they won't make an A record for the subdomain pointing at the new server, stating that it is a security risk. I'm not a DNS expert by any means, but this sounds like total BS to me. I've seen this discussed several times, but I've never seen anyone raise security issues.

Can I fight this, or are they really correct?

10.01% popularity Vote Up Vote Down

: Number of visitor widget I am developing my own blog site in ASP.NET and I would have several blogs in future. I want to have a widget on page which will show the number of user visited

@Shelton105

Posted in: #AspNet #Blog #Free #Widgets

1 Comments

: How to change Bugzilla change privacy notice? How can I change the privacy notice in both the site and email messages? My instance is not public facing. I don't like this: PRIVACY NOTICE:

@Shelton105

Posted in: #Privacy

1 Comments

: Data on male/female online buying patterns Looking for data on the buying pattern for males vs females online: Percent of transactions (with estimated count of total transactions) Percent of

@Shelton105

Posted in: #Marketing #Online

1 Comments

: Google Chrome for Mac, CSS colors and display profiles So, I'm aware that some browsers correct the colors in images in accordance with system settings, and that browsers differ in how they

@Shelton105

Posted in: #Css #GoogleChrome

1 Comments

Login to post a comment!

1 Comments

Sorted by latest first Latest Oldest Best

@Courtney195

Different subdomains can share cookies (depends on the cookie path used), and thus the third party could steal cookies used to authenticate on the main domain. This is also the case if your CMS gets hacked.

You could get a new domain for your new website and setup a redirect on your old domain. That should take care of most security issues.

There might also be some issues regarding cross site scripting. I think your externally hosted website might be allowed to make requests to the parent site with the parent site's cookies. But I've never tried it, so I don't know if the browsers send the .parentsite cookies in that case too.

10% popularity Vote Up Vote Down

Feed

: Is an externally-hosted subdomain a security risk? A company I've been developing a web site for wants to keep their current domain, which is something like company.parentcompany.com. Because we

More posts by @Shelton105

: Number of visitor widget I am developing my own blog site in ASP.NET and I would have several blogs in future. I want to have a widget on page which will show the number of user visited

: How to change Bugzilla change privacy notice? How can I change the privacy notice in both the site and email messages? My instance is not public facing. I don't like this: PRIVACY NOTICE:

: Data on male/female online buying patterns Looking for data on the buying pattern for males vs females online: Percent of transactions (with estimated count of total transactions) Percent of

: Google Chrome for Mac, CSS colors and display profiles So, I'm aware that some browsers correct the colors in images in accordance with system settings, and that browsers differ in how they

Login to post a comment!

1 Comments

Back to top | Use Dark Theme