Connect a custom domain to Medium (profile or publication) using two A records: 162.159.153.4 and 162.159.152.4 on host @. Disable any proxy service first; Medium requires DNS-only resolution. Verification takes up to three days. Subdirectories are not supported.
SPF ~all (SoftFail) marks unauthorized mail as suspicious but delivers it to spam. SPF -all (HardFail) rejects it outright. Start new deployments with ~all, monitor DMARC reports for 2-4 weeks, then switch to -all once your sender list is confirmed complete.
Cargo's current platform uses nameserver delegation, not A records. Point your domain to ns1.cargo.site and ns2.cargo.site from NameSilo's Domain Manager, then add the domain in Cargo's Publish Settings. Requires an active Site Upgrade. Email records are preserved automatically.
A primary nameserver is the writeable master zone file; a secondary is an automatic read-only replica synced via zone transfer. Both typically answer live traffic simultaneously, not just as passive backup. Domains require at least two nameservers; NameSilo supports up to 13 per domain.
MX priority determines mail server order; lower numbers are tried first. Google Workspace now uses a single record (smtp.google.com, priority 1); other providers like Titan Mail use tiered priorities (10, 20). Never give two different providers the same priority; mail will split unpredictably.
Connect custom domain to Adobe Portfolio: add 4 A records in DNS (2 IPs × root and www). Find IPs in Portfolio Settings → Domain Name. Delete conflicting records first. Do not re-enter domain more than 5 times. SSL provisions automatically. 24-48 hours to propagate.
DNS audit checklist: verify A records, audit CNAMEs for dangling records (primary subdomain takeover vector), validate SPF/DKIM/DMARC, check nameserver consistency. Use MXToolbox and SecurityTrails. Remove all records from decommissioned services. Audit quarterly.
Public Wi-Fi captive portals intercept DNS and redirect to a login page. HTTPS blocks this redirect causing SSL errors. Fix: disable VPN and mobile data, visit http://neverssl.com to trigger the portal. Custom DNS like 8.8.8.8 can also block portal detection.
Connect custom domain to Render: A record @ → 216.24.57.1, CNAME www → yourapp.onrender.com. Delete AAAA records first. Render uses IPv4 only. Cloudflare users: use CNAME, set DNS only mode before verification. SSL provisions automatically via Let's Encrypt.
Add rua=mailto:[email protected] to your _dmarc TXT record to receive daily XML aggregate reports. Use a dedicated inbox, not your primary address. Parse reports with Dmarcian or MXToolbox. Start with p=none before enforcing. RUF forensic reports are optional.
AAAA records map domains to IPv6 addresses. IPv4 exhausted in 2011; IPv6 eliminates NAT translation overhead. Run dual-stack A and AAAA records simultaneously to serve all clients. At NameSilo: Domain Manager, blue globe, Add New DNS Record, type AAAA. Recommended TTL: 3600.
Learn what Domain Connect is, how it works, and how it makes connecting your domain to websites, email providers, and online services much easier.
