Custom Domain Blog

Pointing a domain is the part everyone remembers. The TLS certificate is the part that quietly fails right after. Here is the race condition behind it, and how doing the validation in the same flow makes HTTPS just happen.

Platforms that reverse-proxy traffic live or die by being in the request path. The classic mistake is pointing the apex and forgetting www, so half the traffic bypasses your edge. Here is how to change every path at once, with consent, so nothing slips out unprotected.