diff --git a/.github/workflows/contrib.yml b/.github/workflows/contrib.yml
index 6ab60f96c617..bf18f7b051bc 100644
--- a/.github/workflows/contrib.yml
+++ b/.github/workflows/contrib.yml
@@ -43,7 +43,11 @@ jobs:
         # Generate HTML for link redirections.
         python3 "$GENERATE_PY"
         git add *.html
+        # WARN: The CNAME file is for GitHub to redirect requests to the custom domain.
+        # Missing this may entail security issue and domain takeover.
+        # See <https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site#securing-your-custom-domain>
         git add CNAME
 
+
         git commit -m "Deploy $GITHUB_SHA to gh-pages"
         git push origin +gh-pages
diff --git a/ci/generate.py b/ci/generate.py
index 70a7dc1e68d5..1fe1a1661842 100644
--- a/ci/generate.py
+++ b/ci/generate.py
@@ -39,6 +39,9 @@ def main():
                 mapped = "https://doc.rust-lang.org/cargo/reference/{}".format(name)
             f.write(TEMPLATE.format(name=name, mapped=mapped))
 
+    # WARN: The CNAME file is for GitHub to redirect requests to the custom domain.
+    # Missing that may entail security issue and domain takeover.
+    # See <https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site#securing-your-custom-domain>
     with open('CNAME', 'w') as f:
         f.write('doc.crates.io')