You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We strongly recommend that you do not use wildcard DNS records, such as *.example.com. These records put you at an immediate risk of domain takeovers, even if you verify the domain. For example, if you verify example.com this prevents someone from using a.example.com but they could still take over b.a.example.com (which is covered by the wildcard DNS record). For more information, see Verifying your custom domain for GitHub Pages.
But the link in this embedded warning points back to itself (the page it is contained on). And this help page does not include any additional information about wildcard domains, even though the embedded warning says "For more information, see ..."
I might suggest either:
Adding more information to this page about how to avoid using a wildcard in DNS records, and what the preferred setup looks like
Remove the promise for more information on this page in the embedded warning
Additional information
No response
The text was updated successfully, but these errors were encountered:
Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.
@chohlasa Thanks for pointing this out! That's really not a very useful link. Let me see if I can track down what it was supposed to link to.
Sharra-writes
added
pages
Content related to GitHub Pages
and removed
triage
Do not begin working on this issue until triaged by the team
labels
May 9, 2025
Code of Conduct
What article on docs.github.com is affected?
Verifying your custom domain for GitHub Pages
What part(s) of the article would you like to see updated?
There is an embedded warning in the Verifying your custom domain for GitHub Pages section that says:
Warning
We strongly recommend that you do not use wildcard DNS records, such as
*.example.com
. These records put you at an immediate risk of domain takeovers, even if you verify the domain. For example, if you verifyexample.com
this prevents someone from usinga.example.com
but they could still take overb.a.example.com
(which is covered by the wildcard DNS record). For more information, see Verifying your custom domain for GitHub Pages.(The embedded warning appears to come from here.)
But the link in this embedded warning points back to itself (the page it is contained on). And this help page does not include any additional information about wildcard domains, even though the embedded warning says "For more information, see ..."
I might suggest either:
Additional information
No response
The text was updated successfully, but these errors were encountered: