Replying to @kyotonio and @pixeldetracking
Yeah, I think a lot of people use CNAMEs because they’re convenient, not to do anything bad. But once again the bad actors fucked something up for everyone else.
Note that with IPv6 I guess the CNAME threats could be replicated with A records, no?