Skip to content
← Have an idea? Share it!

Settings and activity

1 result found

  1. The ability disable default domains

    43 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    4 comments  ·  General » Hosting  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    Good guy supported this idea  · 
    An error occurred while saving the comment
    Good guy commented  · 

    No firewalls can be added to default domain, the default domain can be scanned and the database can be injected If no firewalls such as Cloudflare can be added to it

    An error occurred while saving the comment
    Good guy commented  · 

    Quote: "Hi Support,

    I understand, but giving a site a lengthy and random name is not resolving the case, same as robots.txt, which is for search engine robots only.
    Because the loophole here is in the DNS lookup system, one can easily see the TXT records that contains the project name and therefore find the unprotected default domain name, especially when I am using the custom domain to connect to the firebase functions server. It generates extra costs If attacked and even data leakage when scanned by some tools If not protected by a firewall. How do I resolve this?
    All in all, I do not want my proejct ID to be public and so as the default domains, because it cannot be protected by firewalls like Cloudflare and subject to DDOS attacks etc. Thanks."