Hacker News Reader

Do you need a real domain for each customer or is a subdomain sufficient isolation?

Real domain. If you have customer1.example.com and customer2.example.com, and customer2.example.com serves malware, all of example.com can be flagged.

apparently, submit your domain to https://publicsuffix.org/ to prevent this from happening?

Reply on news.ycombinator.com