zevlag

> Subdomains can be passwords and a well crafted subdomain should not leak,

I disagree. A subdomain is not secret in any way. There are many ways in which it is transmitted unencrypted. A couple:

- DNS resolution, multiple resolvers and authoritative servers - TLS SNI - HTTP Host Header

There are many middle boxes that could perform safety checks on behalf of the client, and drop it into a list to be rescanned.

- Virus Scanners - Firewalls - Proxies

Oh, it's definitely true. I experience it multiple times.

Here is the archive.org link now that the original link is 404'ing.

https://web.archive.org/web/20221208070504/https://margin.re...

It started out really simple, and good. Then as google added other features, new products, acquired companies, it's gotten harder and harder.

The problem I have with iCloud+ is that it is tied to family group, and my own nuclear family is 7. Let alone all the extended family using my domain.

I'm working on drafting such a letter now.