search

publicsuffix / list

The Public Suffix List
https://publicsuffix.org/
Mozilla Public License 2.0
1.97k stars 1.2k forks source link

Add `durumis.com` #1978

Closed calmlake79 closed 1 month ago

calmlake79 commented 3 months ago

Public Suffix List (PSL) Pull Request (PR) Template

Each PSL PR needs to have a description, rationale, indication of DNS validation and syntax checking, as well as a number of acknowledgements from the submitter. This template must be included with each PR, and the submitting party MUST provide responses to all of the elements in order to be considered.

Checklist of required steps

Submitter affirms the following:

For Private section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to rollback, if at all.

To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.

PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.

(Link: about propagation/expectations)

Description of Organization

https://durumis.com/

I am the owner and operator of durumis, a blog platform that allows users to create and host their own blogs easily. I am requesting this entry in the PSL in order to enable this functionality.

Reason for PSL Inclusion

durumis is a blog platform that allows users to create and host their own blogs. To allow users to register subdomains for their own blogs, we need an entry in the PSL. This will allow us to issue certificates and cookies for user subdomains in a secure manner.

The durumis.com domain has a remaining registration term of over 9 years. We will maintain the _PSL TXT record in place in the respective zone(s).

Number of users this request is being made to serve: The current number of users on the platform is approximately 5,000, and the number is expected to grow rapidly.

DNS Verification via dig

dig +short TXT _psl.durumis.com
"https://github.com/publicsuffix/list/pull/1978"

Results of Syntax Checker (make test)

PASS: libpsl_icu_load_dafsa_fuzzer
PASS: libpsl_icu_fuzzer
PASS: libpsl_icu_load_fuzzer
============================================================================
Testsuite summary for libpsl 0.21.5
============================================================================
# TOTAL: 3
# PASS:  3
# SKIP:  0
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0
============================================================================
Making check in tests
  CC       test-is-public.o
  CC       common.o
  CC       test-is-public-all.o
  CC       test-is-cookie-domain-acceptable.o
  CC       test-is-public-builtin.o
  CC       test-registrable-domain.o
  CCLD     test-is-public
  CCLD     test-is-cookie-domain-acceptable
  CCLD     test-is-public-all
  CCLD     test-is-public-builtin
  CCLD     test-registrable-domain
PASS: test-is-public-builtin
PASS: test-is-public
PASS: test-is-cookie-domain-acceptable
PASS: test-registrable-domain
PASS: test-is-public-all
============================================================================
Testsuite summary for libpsl 0.21.5
============================================================================
# TOTAL: 5
# PASS:  5
# SKIP:  0
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0
============================================================================
Making check in msvc
simon-friedberger commented 3 months ago
simon-friedberger commented 3 months ago

durumis.com returns code 500.

calmlake79 commented 3 months ago

durumis.com returns code 500.

I have made the changes you suggested.

However, it seems there's an error occurring during the build process in GitHub Actions. Could you please advise on how to troubleshoot this issue?

calmlake79 commented 3 months ago

PSL Registration Request (durumis.com): Additional Information Public Suffix List Registration Request: durumis.com

Reason for Request:

durumis.com is a blog platform operated by Dreamyoungs Inc., a South Korean company. It provides users with personalized subdomains (e.g., user-id.durumis.com ) to help them build their own brands and create unique blogs.

We expect the following benefits from PSL registration:

About Dreamyoungs Inc.:

Dreamyoungs Inc. is a South Korean IT company that strives to provide user-centric services. durumis.com is one of Dreamyoungs Inc.'s core services, aiming to provide a space where users can freely express their thoughts and communicate.

Thank you for your consideration. We look forward to a positive response regarding the PSL registration.

yahesh commented 2 months ago

The location of this domain is wrong. It has been added to the ICANN DOMAINS section of the PSL. Please move it to the correct place in the PRIVATE DOMAINS section of the PSL.

Furthermore, the reason for the request is to "issue certificates [...] for user subdomains in a secure manner". This sounds as if the addition to the PSL is meant to circumvent limitations of 3rd parties.

calmlake79 commented 2 months ago

The location of this domain is wrong. It has been added to the ICANN DOMAINS section of the PSL. Please move it to the correct place in the PRIVATE DOMAINS section of the PSL.

Furthermore, the reason for the request is to "issue certificates [...] for user subdomains in a secure manner". This sounds as if the addition to the PSL is meant to circumvent limitations of 3rd parties.

@yahesh // You are absolutely right; mentioning "issuing certificates" appears to have been an oversight, likely introduced during the translation process. Thank you for bringing this to my attention!

The core issue lies in our commitment to providing personalized subdomains (e.g., user-id.durumis.com) for our users' blogs. We believe this feature empowers our users to cultivate their unique online identities. However, we've encountered unforeseen complexities related to cookie handling on these subdomains.

After thorough research, we are convinced that adding durumis.com to the PSL is the most effective solution to ensure a seamless and secure browsing experience. We are dedicated to providing the best possible platform for our users, and resolving these technical challenges is paramount to achieving that goal. We kindly request your approval for this change so we can continue to improve our platform and better serve our users.

simon-friedberger commented 2 months ago

@calmlake79 Sorting is still wrong. Can you provide some examples of sites? Have you read the disclaimer about potential impact on cookies for durumis.com?

calmlake79 commented 2 months ago

@simon-friedberger //

I am currently piloting a system on durumis.com where subdomains are issued to users in stages. Here are a few examples:

https://official.durumis.com/ https://ai-news-japan.durumis.com/ https://rebeka.durumis.com/

However, because durumis.com is not on the PSL, I am facing security limitations that impact the services I can provide.

Specifically, I need more control over cross-subdomain cookie management. My development team requires the ability to define granular policies for cookie access across subdomains. For example, I need to prevent a cookie set by "sub1.durumis.com" from being arbitrarily read by "sub2.durumis.com" to mitigate potential privacy risks.

Thank you!

( Sorting is updated! Thank you! )