We're moving from the old domain to a new one. The domain field is read-only now. Do I have to make a new key and update every deployment?
No — that's what Transfer API is for. It moves the lock to the new domain, rotates the key, and puts you back through verification for the new domain, which is the part that matters. You update the key once at the end.
It's deliberately not a text field. A domain you can edit by typing is a domain that can be changed by anyone who gets into the account, and the lock is the thing standing between your key and someone else's site.
Done, took about ten minutes including DNS. The rotation caught me out for a second until I realised the old key was meant to stop working.
Sign in to reply. Posting needs an account so threads can be moderated and so answers have a name on them.
Sign in Create an account