Pages domain verification: infer ownership of subdomains
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
In GitLab 10.5, we added pages domain verification. It would be good to enhance this so that if a project has proven ownership of domain.com, a custom domain like sub.domain.com will also be automatically verified without needing to add many additional TXT records.
There are potential security concerns with this, however - I don't think it's always the case that someone who can publish records for domain.com can also control sub.domain.com. Needs more research.
Edited by 🤖 GitLab Bot 🤖