DNS & TLS
Hostname routing and certificate lifecycle for storefront properties.
Recommended CNAME pattern
| Host | Type | Target |
|---|---|---|
www.northwind.shop | CNAME | www.northwind.shop.edge.dt8cdn.net |
assets.northwind.shop | CNAME | assets.northwind.shop.edge.dt8cdn.net |
origin.northwind.shop | A/AAAA | Your origin IPs (not via DT8) |
Origin must not CNAME through the edge — that creates a loop. Keep origin on a distinct hostname.
Apex domains
If customers type northwind.shop, use your DNS provider’s ALIAS/ANAME to the same edge target, or 301 redirect apex → www at DNS or origin.
Certificates
- Let’s Encrypt / managed certs per hostname
- HTTP-01 or DNS-01 validation depending on zone setup
- Renewal is automatic; no downtime on rotate
TLS policy
Edge terminates TLS 1.2+ (1.3 preferred). HSTS can be enabled per property after you confirm all assets are HTTPS.