Should the holder of a domain be able to hand a subdomain to someone else's workspace #130

New Issue

2026-09-21T07:18:38Z

cgalo5758 commented

2026-09-21 07:18:38 +00:00

The question

A live claim owns its whole subtree, and the registry places no site inside another workspace's claim. So when the holder of a domain wants to let someone else run a site on a subdomain of it, nothing in the console expresses that: the other workspace's site gets no placement (the row that wires a domain to the thing serving it), and the certificate ask for that subdomain is refused unless a fallback answerer is still in front of the console. People do delegate subdomains, and the holder can revoke a delegation at the nameserver at any time. Should a claim holder be able to delegate a child of their claim to another workspace, and what does the delegate get?

What depends on the answer

Whether several workspaces can share one domain at all; the registry's acts and their revocation; how the certificate ask and the wiki sync treat a name under a delegated child; and what the organization page and the Domains page show to each of the two sides.

Options known so far

No delegation: a subtree belongs to one workspace, and sharing a domain means splitting it into separate claims.
A delegation act: the holder carves a child claim for another workspace and keeps the rest of the tree, with an explicit end. Open inside that option: whether a delegate may delegate deeper, whether they may point their own DNS at the child, whether the delegation survives the parent's release, and what the two workspaces each see.

This is the same invariant as the open question of whether someone who proves control of a delegated subdomain may claim it under a domain another member holds, so the two are decided together: one asks about a name the console carves, the other about a name a member brings.

Decided when

The domains model states the delegation act, what it grants, how it ends, and what the ask and the sync do under a delegated child; the Domains page shows a delegation from both sides.

Migrated from status/issues.md at b7a0e15

## The question A live claim owns its whole subtree, and the registry places no site inside another workspace's claim. So when the holder of a domain wants to let someone else run a site on a subdomain of it, nothing in the console expresses that: the other workspace's site gets no placement (the row that wires a domain to the thing serving it), and the certificate ask for that subdomain is refused unless a fallback answerer is still in front of the console. People do delegate subdomains, and the holder can revoke a delegation at the nameserver at any time. Should a claim holder be able to delegate a child of their claim to another workspace, and what does the delegate get? ## What depends on the answer Whether several workspaces can share one domain at all; the registry's acts and their revocation; how the certificate ask and the wiki sync treat a name under a delegated child; and what the organization page and the Domains page show to each of the two sides. ## Options known so far - No delegation: a subtree belongs to one workspace, and sharing a domain means splitting it into separate claims. - A delegation act: the holder carves a child claim for another workspace and keeps the rest of the tree, with an explicit end. Open inside that option: whether a delegate may delegate deeper, whether they may point their own DNS at the child, whether the delegation survives the parent's release, and what the two workspaces each see. This is the same invariant as the open question of whether someone who proves control of a delegated subdomain may claim it under a domain another member holds, so the two are decided together: one asks about a name the console carves, the other about a name a member brings. ## Decided when The domains model states the delegation act, what it grants, how it ends, and what the ask and the sync do under a delegated child; the Domains page shows a delegation from both sides. Migrated from status/issues.md at b7a0e15

cgalo5758 added the

kind

design

area/domains area/fedwiki labels 2026-09-21 07:18:38 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wiki-cafe/member-console#130