search

publicsuffix / list

The Public Suffix List
https://publicsuffix.org/
Mozilla Public License 2.0
2.05k stars 1.22k forks source link

remove `mc.eu.org` #2099

Closed wdhdev closed 1 month ago

wdhdev commented 2 months ago

This domain name I believe was originally added along with all of the other eu.org suffixes (pre moving to GitHub?)

There are no nameservers under this subdomain nor does there seem to be any registered subdomains for it.

If you search Google using site:mc.eu.org, there is no results. The domain is not listed on the eu.org registration website either: https://nic.eu.org/opendomains.html

After running a SSL certificate lookup, no certificates were found: https://crt.sh/?q=mc.eu.org

I believe there is enough evidence to support the idea that this subdomain is not used nor is active.

groundcat commented 2 months ago

According to the "Open domains and policies" page at eu.org:

If the country (or other, like NET.eu.org for example) of your dreams is not in the list below, and you can provide name service and administration for it (this is now a required condition to avoid creating many almost empty country domains that we then have to manage), you can write to hostmaster@EU.org to request that it is created and delegated to you. Note that, in that case, it must obviously be open to everyone.

Assuming "mc" means the Principality of Monaco, it could fall under this rule and might be once open for registration some years ago. However, I agree that it appears this suffix is no longer in use currently. It would be great to get confirmation from the operator of eu.org (Pierre Beyssac?), as eu.org is still an active project and might intend to bring it back for open registration in the future.

simon-friedberger commented 2 months ago

@pbeyssac Would you mind having a look? Can we remove mc.eu.org?

simon-friedberger commented 1 month ago

Is eu.org generally gone? Maybe this should have been *.eu.org in the first place.

@pbeyssac Any comments?

wdhdev commented 1 month ago

*.eu.org would not work as eu.org does issue subdomains at the 3rd level (e.g. exampledomain.eu.org) which would in result in those subdomains being declared as TLDs which would break some services such as Cloudflare which does not allow zone additions for "TLDs" included in the PSL (e.g. web.example.eu.org would work, however example.eu.org wouldn't if eu.org was using a wildcard.)

simon-friedberger commented 1 month ago

I guess that point is moot if it doesn't come back.

wdhdev commented 1 month ago

What do you mean? As in the service is effectively dead?

simon-friedberger commented 1 month ago

Yes, it appears to be down for me.

wdhdev commented 1 month ago

https://nic.eu.org/ loads for me.

groundcat commented 1 month ago

The registry site https://nic.eu.org/ loads for me, but very slowly. Based on historical snapshots from archive.org, it's mostly online, so this project seems to be active, at least for existing users.

image (Blue dots indicate the website returns a 200 status code)

However, it seems they've stopped reviewing new registrations and are not responding to emails, according to multiple user reports linked below. The eu.org operator has gone silent and hasn't been heard from in a while. The current status is unknown, but the existing eu.org nameservers are still functioning properly for now.

As @wdhdev mentioned, we can't add them as *.eu.org because example.eu.org was open for registration, and most registrants are using the eu.org-level domains. Using a wildcard would disrupt things for existing eu.org-level users.

https://www.google.com/search?q=site%3Aeu.org

I suspect the slowness and downtimes of https://nic.eu.org/ may be due to a high amount of brute-force hacking activities in recent months since the project went silent, according to a security warning thread on a China-based forum: https://linux.do/t/topic/157058. In this thread, a malicious party is reportedly brute-forcing user accounts in batches to take over their domains, and multiple users have reported that their domains were transferred out without authorization. This makes me question the current state of the eu.org project.

I just sent an email to <webmaster@eu.org>, <hostmaster@eu.org>, and the submitter's personal email address, to invite them to comment here if possible.

wdhdev commented 1 month ago

The site loads normally, it's not slow at least for me. I can confirm they are not responding to emails nor domain registration requests from personal experience.

It sort of seems the project is completely dead.

wdhdev commented 1 month ago

@simon-friedberger It should be safe to remove this specific entry as it does not have any subdomains when looking it up on https://subdomainfinder.c99.nl, as well as results are not returned on Google when searching site:mc.eu.org either.