Custom domain architecture concepts

Understand the domain lifecycle, DNS records, ownership verification, managed TLS, provider capabilities, status, errors, and tenant security.

A safe custom-domain system separates tenant authorization, provider state, DNS routing, hostname ownership, and certificate issuance. These concepts explain the boundaries Domain SDK preserves and the state your application needs to represent.

Domain lifecycle

Platform providers

DNS records

Ownership verification

Managed certificates

Status model

Error handling

Provider capabilities

Security model

Testing provider

Exercise domain flows without credentials, network calls, or shared state.

Domain lifecycle

Move a hostname from user input to provider-authoritative activation.