Stratos accepts any subdomains of env.DOMAIN

[HartS]

Not actually sure if this is a bug. Stratos doesn't work when it detects a domain mismatch (you get a 401 response when trying to access it). However, the domain check makes no restrictions about subdomains higher-level domain segments match.

For example, if the domain deployed with is x.y.z, stratos will work with any requests it receives to a.b.c.x.y.z, etc.