Cloudflare Developers•3y ago

Is it possible to verify ownership for a pages subdomain for cloudflare pages site? eg. projectname.

Is it possible to verify ownership for a pages subdomain for cloudflare pages site? eg. projectname.pages.dev

Vvish Is it possible to verify ownership for a pages subdomain for cloudflare pages si...

chientrm.com•8/21/23, 3:57 AM

afaik nope.

chientrm.com•8/21/23, 3:57 AM

you need your own domain name to add TXTTXT dns record.

Vvish Is it possible to verify ownership for a pages subdomain for cloudflare pages si...

chientrm.com•8/21/23, 3:58 AM

meanwhile, you can verify ownership using static file instead.

chientrm.com•8/21/23, 3:58 AM

then you don't need custom domain.

vishOP•8/21/23, 3:58 AM

using static file for pages subdomain?

Vvish using static file for pages subdomain?

chientrm.com•8/21/23, 3:59 AM

yes.

chientrm.com•8/21/23, 3:59 AM

what framework u're using?

Cchientrm.com yes.

vishOP•8/21/23, 3:59 AM

vite with react

Vvish vite with react

chientrm.com•8/21/23, 4:00 AM

what service are u trying to verify ownership?

Cchientrm.com what service are u trying to verify ownership?

vishOP•8/21/23, 4:01 AM

i am required to setup imperva WAF for a cloudflare pages site.

Vvish i am required to setup imperva WAF for a cloudflare pages site.

chientrm.com•8/21/23, 4:02 AM

doesn't seem like they allow verifying using static file.

vishOP•8/21/23, 4:05 AM

if i link the pages site to a custom domain, how can i redirect traffic from custom domain to using imperva WAF. because imperva also requires changing cname to the domain which will unlink pages site

Vvish if i link the pages site to a custom domain, how can i redirect traffic from cus...

chientrm.com•8/21/23, 4:06 AM

I'm not familiar with imperva but afaict it's not a redirect.

Ook still gg? You can just do this then you won't get spoofed right? https://support...

chientrm.com•8/21/23, 9:14 AM

I'm not sure, $80 then they can spoof but Idk how could they spoof DKIM.

Cchientrm.com I'm not sure, $80 then they can spoof but Idk how could they spoof DKIM.

Hello, I’m Allie!•8/21/23, 9:57 AM

That’s the thing. The DMARC spec only requires SPF OR DKIM validation. So an email that passes SPF is perfectly valid, even if it doesn’t pass DKIM

HHello, I’m Allie!That’s the thing. The DMARC spec only requires SPF **OR** DKIM validation. So an...

chientrm.com•8/21/23, 10:03 AM

I thought it was SPK AND DKIM

chientrm.com•8/21/23, 10:03 AM

but DKIM will still be failed on the receiving server?

Cchientrm.com I thought it was SPK **AND** DKIM

Hello, I’m Allie!•8/21/23, 10:23 AM

Yes, but you can only get DMARC to enforce that one of them is valid

Hello, I’m Allie!•8/21/23, 10:27 AM

Though I’ve actually been wondering what happens if you just don’t set SPF

HHello, I’m Allie!Though I’ve actually been wondering what happens if you just don’t set SPF

chientrm.com•8/21/23, 10:39 AM

Anyway, if you set rua:to in dmarc they will report to your email everyday so that you will notice if someone is spoofing your domain name.

Ook So even if you set SPF, DKIM, DMARC & Domain Lockdown at cf workers, there's sti...

sathoro•8/21/23, 12:12 PM

it's just up to the recipient's provider isn't it? nothing guarantees a message getting rejected or going to spam

James•8/21/23, 12:34 PM

Yep I would still recommend avoiding MailChannels until they enforce some kind of basic domain sender verification for ALL outgoing email. Until then, they’re just being irresponsible.

BlaBla (Please tag or reply)•8/21/23, 12:52 PM

Is least outstanding requests traffic steering not available for non-paying customers (https://developers.cloudflare.com/load-balancing/understand-basics/traffic-steering/steering-policies/least-outstanding-requests/) ?

Least Outstanding Requests steering · Cloudflare Load Balancing docs

Least Outstanding Requests steering allows you to route traffic to pools that currently have the fewest number of outstanding requests.

BlaBla (Please tag or reply)•8/21/23, 12:52 PM

Whats the cost of getting this?

Ook I think this is where DMARC comes in, as you can reject if both SPF & DKIM fails

sathoro•8/21/23, 12:53 PM

and who do you think enforces DMARC?

Ook im guessing its not recipient's provider

sathoro•8/21/23, 12:57 PM

...

Original message was deleted

Chaika•8/21/23, 1:21 PM

You couldn't create a caching rule for r2.dev, but regardless it looks like cache just isn't enabled for it at all:
r2

chientrm.com•8/21/23, 2:09 PM

do cloudflare have plan on migrating fly.io or building an equivalent one?

chientrm.com•8/21/23, 2:10 PM

fly to the cloud

fly to the cloud

chientrm.com•8/21/23, 2:11 PM

another API key for me to remove

Cchientrm.com ``` fly to the cloud ```

Hello, I’m Allie!•8/21/23, 2:11 PM

Re:

fly to the supercloud

fly to the supercloud

HHello, I’m Allie!Re: ``` fly to the supercloud ```

chientrm.com•8/21/23, 2:12 PM

fly to cloudflare

fly to cloudflare

arkhamrogue99•8/21/23, 2:13 PM

oh just please help me already :/

I need help with cloudflare turnstile widget Crashing on my windows 7

arkhamrogue99•8/21/23, 2:15 PM

@Community Champion

arkhamrogue99•8/21/23, 2:15 PM

pwease

arkhamrogue99•8/21/23, 2:15 PM

help me

Aarkhamrogue99 @Community Champion

DaniFoldi•8/21/23, 2:15 PM

please don't ping champs for anything other than moderation

Aarkhamrogue99 oh just please help me already :/ https://discord.com/channels/5953179901913989...

Chaika•8/21/23, 2:17 PM

this is the discord for Cloudflare Developers, more aimed at helping Devs with Cloudflare dev products. Our help with turnstile is limited, and it's kind of a black box product. Usually some combination of extensions/try different browser/you have a virus in your pc, try from another device/etc help for those issues