[{"data":1,"prerenderedAt":288},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Farchitecture\u002Fdomains-and-claims":75,"docs-surround-\u002Farchitecture\u002Fdomains-and-claims":283},[4,45,51,57,63,69],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,11,15,19,23,27,31,35],{"title":5,"path":6,"stem":10},"architecture\u002Findex",{"title":12,"path":13,"stem":14},"Identity","\u002Farchitecture\u002Fidentity","architecture\u002F1.identity",{"title":16,"path":17,"stem":18},"Organisations","\u002Farchitecture\u002Forganisations","architecture\u002F2.organisations",{"title":20,"path":21,"stem":22},"Roles","\u002Farchitecture\u002Froles","architecture\u002F3.roles",{"title":24,"path":25,"stem":26},"Domains and claims","\u002Farchitecture\u002Fdomains-and-claims","architecture\u002F4.domains-and-claims",{"title":28,"path":29,"stem":30},"Access","\u002Farchitecture\u002Faccess","architecture\u002F5.access",{"title":32,"path":33,"stem":34},"Invitations and requests","\u002Farchitecture\u002Finvitations-and-requests","architecture\u002F6.invitations-and-requests",{"title":36,"path":37,"stem":38,"children":39,"page":44},"Data model","\u002Farchitecture\u002Fdata-model","architecture\u002F7.data-model",[40],{"title":41,"path":42,"stem":43},"ZoneAudit","\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","architecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":46,"path":47,"stem":48,"children":49},"Glossary","\u002Fglossary","glossary\u002Findex",[50],{"title":46,"path":47,"stem":48},{"title":52,"path":53,"stem":54,"children":55},"Guides","\u002Fguides","guides\u002Findex",[56],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"children":61},"Products","\u002Fproducts","products\u002Findex",[62],{"title":58,"path":59,"stem":60},{"title":64,"path":65,"stem":66,"children":67},"Trust","\u002Ftrust","trust\u002Findex",[68],{"title":64,"path":65,"stem":66},{"title":70,"path":71,"stem":72,"children":73},"Updates","\u002Fupdates","updates\u002Findex",[74],{"title":70,"path":71,"stem":72},{"id":76,"title":24,"body":77,"description":276,"extension":277,"meta":278,"navTitle":279,"navigation":280,"path":25,"roleNote":280,"seo":281,"stem":26,"__hash__":282},"docs\u002Farchitecture\u002F4.domains-and-claims.md",{"type":78,"value":79,"toc":266},"minimark",[80,85,89,123,130,133,136,140,143,147,153,220,224,227,252,255,259],[81,82,84],"h2",{"id":83},"claiming-a-domain","Claiming a domain",[86,87,88],"p",{},"An organisation claims a domain to show that it runs it. A Domain manager, or anyone with a higher role, adds the domain. CobraSphere then gives a TXT record to publish.",[90,91,92,105],"table",{},[93,94,95],"thead",{},[96,97,98,102],"tr",{},[99,100,101],"th",{},"Record",[99,103,104],{},"Value",[106,107,108],"tbody",{},[96,109,110,118],{},[111,112,113,114],"td",{},"TXT at ",[115,116,117],"code",{},"_cobrasphere.\u003Cdomain>",[111,119,120],{},[115,121,122],{},"cobrasphere-verify=\u003Ctoken>",[86,124,125,126,129],{},"For the domain example.com the record goes at ",[115,127,128],{},"_cobrasphere.example.com",". The token is 32 random characters.",[86,131,132],{},"Only that one name is checked, never the domain itself. So the record does not clash with SPF or other TXT records at the domain, and it works for a domain that points elsewhere with a CNAME.",[86,134,135],{},"Domain names are kept in lower case, without a trailing dot. A name with accented or other non-Latin letters is kept in its punycode form.",[81,137,139],{"id":138},"one-organisation-per-domain","One organisation per domain",[86,141,142],{},"One organisation holds a domain at a time. A claim from a second organisation is refused while another organisation holds the domain. The organisation that holds a domain can hand it over, which ends its claim.",[81,144,146],{"id":145},"claim-statuses","Claim statuses",[148,149,150],"claim-states-diagram",{},[86,151,152],{},"How a claim moves between its four statuses.",[90,154,155,168],{},[93,156,157],{},[96,158,159,162,165],{},[99,160,161],{},"Status",[99,163,164],{},"What it means",[99,166,167],{},"Holds the domain",[106,169,170,183,196,208],{},[96,171,172,177,180],{},[111,173,174],{},[115,175,176],{},"PENDING",[111,178,179],{},"Added. The TXT record has not been found yet",[111,181,182],{},"No",[96,184,185,190,193],{},[111,186,187],{},[115,188,189],{},"VERIFIED",[111,191,192],{},"The record was found. The organisation holds the domain",[111,194,195],{},"Yes",[96,197,198,203,206],{},[111,199,200],{},[115,201,202],{},"FAILING",[111,204,205],{},"A later check did not find the record. The organisation still holds the domain for 14 days",[111,207,195],{},[96,209,210,215,218],{},[111,211,212],{},[115,213,214],{},"ENDED",[111,216,217],{},"Handed over, or the record stayed missing for 14 days. Kept as history",[111,219,182],{},[81,221,223],{"id":222},"checking-again","Checking again",[86,225,226],{},"The records are checked every day.",[228,229,230,234,237,243,249],"ul",{},[231,232,233],"li",{},"A verified domain is checked again once a month.",[231,235,236],{},"A failing domain is checked every day.",[231,238,239,240,242],{},"When a check fails, the claim becomes ",[115,241,202],{}," and the organisation's domain managers are told by email.",[231,244,245,246,248],{},"When the record is found again, the claim is ",[115,247,189],{}," again.",[231,250,251],{},"After 14 days of failing, the claim ends.",[86,253,254],{},"A pending claim can be removed. A claim that holds a domain, or one that has ended, cannot be removed.",[81,256,258],{"id":257},"one-domain-shared","One domain, shared",[86,260,261,262,265],{},"A claimed domain is the same domain record that ZoneAudit uses. The claim and ZoneAudit share one domain ID, so the products agree on which domain is meant. See ",[263,264,41],"a",{"href":42},".",{"title":267,"searchDepth":268,"depth":268,"links":269},"",3,[270,272,273,274,275],{"id":83,"depth":271,"text":84},2,{"id":138,"depth":271,"text":139},{"id":145,"depth":271,"text":146},{"id":222,"depth":271,"text":223},{"id":257,"depth":271,"text":258},"How an organisation proves it runs a domain, with one DNS TXT record.","md",{},null,true,{"title":24,"description":276},"6bhho4WwNH9DJ4VyuWMZ5YNFrLOnvBvF7kxTiwYHFj4",[284,286],{"title":20,"path":21,"stem":22,"description":285,"children":-1},"Seven roles, from Guest viewer to Owner. Each role includes every role below it.",{"title":28,"path":29,"stem":30,"description":287,"children":-1},"Which CobraSphere products a person may open.",1794325886544]