[dns-operations] Monday rant againt the uses of the Public Suffix List

[Warren Kumari]

On Jan 21, 2013, at 5:32 PM, Andrew Sullivan <ajs at anvilwalrusden.com> wrote:

> On Mon, Jan 21, 2013 at 03:29:28PM -0500, Warren Kumari wrote:
>> Please sir, if I run www.images.example.co.uk, can I set a cookie at images.example.co.uk? How about example.co.uk? Fine… Now .co.uk? Hmm…
>> 
>> There is no DNS query that will (or should) tell me that...
> 
> I strongly disagree, and have written a draft that would provide,
> among other things, what I believe to be such a mechanism

Oh…. Huh. Well, there's a thing…

(Obviously) I haven't had a chance to actually read this properly yet, but from a quick skim it looks like a grand idea…

I guess I'll modify my earlier to "There is no DNS query that will (or should) currently tell me that, but maybe in the not too distant future there will be… Go read: <blah>"

:-)

W



> (though some
> people on the W3C websec list seem to disagree, because they want
> assurances that are not currently provided by the public suffix list).
> The draft has heard some support from various reviewers, but I'm still
> not sure where next to go with it, so I haven't been flogging it.
> Review is welcome, however.
> 
> http://tools.ietf.org/html/draft-sullivan-domain-origin-assert-02
> 
> Best regards,
> 
> A
> 
> -- 
> Andrew Sullivan
> ajs at anvilwalrusden.com
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

--
Life is a concentration camp.  You're stuck here and there's no way out and you can only rage impotently against your persecutors.
                -- Woody Allen