tmcw commented 4 months ago

Public Suffix List (PSL) Pull Request (PR) Template

Each PSL PR needs to have a description, rationale, indication of DNS validation and syntax checking, as well as a number of acknowledgements from the submitter. This template must be included with each PR, and the submitting party MUST provide responses to all of the elements in order to be considered.

Checklist of required steps

[x] Description of Organization
[x] Robust Reason for PSL Inclusion
[x] DNS verification via dig
[x] Run Syntax Checker (make test)
[x] Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration, and we shall keep the _PSL txt record in place in the respective zone(s) in the affected section

Submitter affirms the following:

[x] We are listing any third-party limits that we seek to work around in our rationale such as those between IOS 14.5+ and Facebook (see Issue #1245 as a well-documented example)
[x] This request was not submitted with the objective of working around other third-party limits
[x] The Guidelines were carefully read and understood, and this request conforms
[x] The submission follows the guidelines on formatting and sorting

For Private section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to rollback, if at all.

To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.

PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.

(Link: about propagation/expectations)

[x] Yes, I understand. I could break my organization's website cookies etc. and the rollback timing, etc is acceptable. Proceed.

Description of Organization

I am Tom MacWright and I represent Val Town, Inc. Val Town is a social website for writing small programs in TypeScript that can power websites and APIs. These programs automatically get subdomains of val.run where user-submitted and controlled code can run.

Organization Website: https://val.town/

Reason for PSL Inclusion

Users' code runs within separate subdomains of web.val.run and express.val.run. Because their code can be arbitrary TypeScript/JavaScript handlers, they can issue and receive cookies, and we want to ensure that those cookies are fully isolated between different applications. We also issue LetsEncrypt certificates for each wildcard user subdomain.

Number of users this request is being made to serve: 7,500 Identify if this is current or an estimate: current

DNS Verification via dig

dig +short TXT _psl.web.val.run

"https://github.com/publicsuffix/list/pull/1964"

dig +short TXT _psl.express.val.run

"https://github.com/publicsuffix/list/pull/1964"

Results of Syntax Checker (`make test`)

PASS: test-is-public
PASS: test-is-cookie-domain-acceptable
PASS: test-is-public-all
PASS: test-is-public-builtin
PASS: test-registrable-domain
============================================================================
Testsuite summary for libpsl 0.21.5
============================================================================
# TOTAL: 5
# PASS:  5
# SKIP:  0
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0
============================================================================
Making check in msvc

yahesh commented 4 months ago

Ordering is correct.

simon-friedberger commented 3 months ago

[x] Expiration (Note: Must STAY >2y at all times)
- [x] val.run expires 2027-04-15
[x] DNS _psl entries (Note: Must STAY in place)
[x] Tests pass
[x] Sorting (see above)
[x] Reasoning/Organization description