Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are working on setting up a list of domain names we need to have whitelisted for educational institutions who use our site. We are using AWS S3 as well as cloudfront.

In our cloud front, we have multiple cnames set up such as and each pointing to a different domain name in the cloudfront system so we can track who is using what via domain.

The question is, can we just have the school whitelist * (which is our domain) or should we have them also whitelist the * domain as well?

share|improve this question

It depends on how they whitelist.

If they do so at the IP level, as long as the IP ultimately pointed to by the CNAME is whitelisted, it would be OK. At the DNS level, it would depend on whether the implementation allows whitelisted CNAMEs to automatically allow the A lookup to complete the request, or if the A lookup would fail if the hostname given by the CNAME is not permitted.

Other implementations (proxies, browser-level URL checking, etc) would depend as well.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.