Seonglae ChoMulti-tenant
The core of a multi-tenant platform lies in the initial design, with domain, isolation, and routing decisions almost permanently locking in future architecture.
If tenants execute arbitrary code/content, they must be separated from the main domain. Subdomains are also risky due to reputation concerns → separate domain (TLD separation) is recommended. Listing a domain on the PSL (Public Suffix List) enforces cross-subdomain cookie and storage isolation at the browser level. However, this only solves security isolation and reputation issues remain
A single software instance running on one server serves multiple tenants. A tenant is a group of users who share common specific access permissions to the software instance
