Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Rad Web Hosting Domains section - add myradweb.net, servername.us #1760

Merged
merged 5 commits into from
Mar 1, 2024

Conversation

sclaeys
Copy link
Contributor

@sclaeys sclaeys commented May 14, 2023

Also, the template had 10 tasks. Please put them all back and complete them.

Checklist of required steps

My name is Scott Claeys, I am a network engineer, and I represent Rad Web Hosting.

Rad Web Hosting provides web hosting and servers to users around the globe.

  • [ x] Robust Reason for PSL Inclusion
    Rad Web Hosting offers clients the ability to reserve unclaimed subdomains of *.myradweb.net for the purpose of staging incoming site migrations, viewing site updates in the wild, or for creation of webspaces to host websites and applications without registering a paid domain name.

We need to isolate them from one another (eg: we don't want client1.myradweb.net to be able to set a cookie readable from client2.myradweb.net).

Same applies for region specific endpoints. client1.uscp.myradweb.net should not be able to set cookies readable from bob-client2.uscp.myradweb.net site.

Number of users this request is being made to serve: Currently some hundreds are already using the service, but it is estimated to increase to thousands as our clients are continuously finding new creative use-cases for use of these "staging" domains.

Rad Web Hosting automatically generates unique hostnames for every cloud instance deployed that utilizes the *.servername.us second-level domain. These hostnames also provide access to a DNS zone which can be modified and customized by client.

We need to isolate them from one another (eg: we don't want client1.servername.us to be able to set a cookie readable from client2.servername.us).

Same applies for region specific endpoints. client1.us.servername.us should not be able to set cookies readable from bob-client2.us.servername.us site.

Number of users this request is being made to serve: Currently, this system is supporting hundreds of instances.

  • [ x] DNS verification via dig
dig +short TXT _psl.myradweb.net
"https://github.com/publicsuffix/list/pull/1760"
dig +short TXT _psl.servername.us
"https://github.com/publicsuffix/list/pull/1760"
  • [ x] Run Syntax Checker (make test)
    Test run successfully

  • [x ] Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration, and we shall keep the _PSL txt record in place in the respective zone(s) in the affected section

Submitter affirms the following:

  • [x ] We are listing any third-party limits that we seek to work around in our rationale such as those between IOS 14.5+ and Facebook (see Issue #1245 as a well-documented example)
  • [x ] This request was not submitted with the objective of working around other third-party limits
  • [x ] The Guidelines were carefully read and understood, and this request conforms
  • [x ] The submission follows the guidelines on formatting and sorting

For Private section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to rollback, if at all.

To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.

PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.

(Link: about propagation/expectations)

  • [ x] Yes, I understand. I could break my organization's website cookies etc. and the rollback timing, etc is acceptable. Proceed.

* [x] Description of Organization
* [x] Reason for PSL Inclusion
* [x] DNS verification via dig
* [x] Run Syntax Checker (make test)

* [x] Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration.

Description of Organization
====

Organization Website: https://radwebhosting.com

My name is Scott Claeys, I am a network engineer, and I represent Rad Web Hosting.

Rad Web Hosting provides web hosting and servers to users around the globe.

Reason for PSL Inclusion
====

User (third-party) content is served from subdomains of myradweb.net and servername.us. Adding this domain to the PSL will stymie cookie stuffing attacks across these subdomains.

The registration term for myradweb.net and servername.us is greater than 2 years in the future, and it will be extended automatically in advance of expiration.

```
% whois myradweb.net | grep "Registry Expiry"
Registry Expiry Date: 2023-07-28T09:23:41Z

% whois myradweb.net | grep "Registry Expiry"
Registry Expiry Date: 2023-07-28T09:23:41Z
```

DNS Verification via dig
=======

```
dig +short TXT _psl.myradweb.net
"publicsuffix#1219"

dig +short TXT _psl.servername.us
"publicsuffix#1219"
```

make test
=========

Test run successfully
@sclaeys
Copy link
Contributor Author

sclaeys commented May 14, 2023

Confirmed

@sclaeys sclaeys changed the title add myradweb.net and servername.us to Rad Web Hosting Update Rad Web Hosting Domains Jun 6, 2023
@sclaeys
Copy link
Contributor Author

sclaeys commented Jun 6, 2023

Please let us know of any further requirements for inclusion.

@sitedata
Copy link

sitedata commented Jun 7, 2023

Seems good!

Copy link

@sitedata sitedata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Safe to merge

@sclaeys
Copy link
Contributor Author

sclaeys commented Sep 23, 2023

Is there anyone with write access who can check this PR? Very urgent.

Copy link
Contributor Author

@sclaeys sclaeys left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perfect

@dnsguru
Copy link
Member

dnsguru commented Sep 25, 2023

It appears the request template was never completed, listing rationale and number of users etc.

Complete requests are helpful for the unpaid reviewers who volunteer their time on this project as they process through the queue of PR.

Recommemd to complete request and also read the guidelines - especially about propogation timing - to ensure all expectations are aligned with the project resourcing.

@sclaeys sclaeys changed the title Update Rad Web Hosting Domains Update Rad Web Hosting Domains section - add myradweb.net, servername.us Oct 13, 2023
@sclaeys
Copy link
Contributor Author

sclaeys commented Oct 13, 2023

It appears the request template was never completed, listing rationale and number of users etc.

Complete requests are helpful for the unpaid reviewers who volunteer their time on this project as they process through the queue of PR.

Recommemd to complete request and also read the guidelines - especially about propogation timing - to ensure all expectations are aligned with the project resourcing.

Please check the updated comment

@sclaeys sclaeys closed this Nov 15, 2023
@sclaeys sclaeys reopened this Nov 15, 2023
@sclaeys
Copy link
Contributor Author

sclaeys commented Nov 15, 2023

Test

  • Description of Organization
  • Reason for PSL Inclusion
  • DNS verification via dig
  • Run Syntax Checker (make test)
  • Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration.

Description of Organization

Organization Website: https://radwebhosting.com

My name is Scott Claeys, I am a network engineer, and I represent Rad Web Hosting.

Rad Web Hosting provides web hosting and servers to users around the globe.

Reason for PSL Inclusion

Rad Web Hosting offers clients the ability to reserve unclaimed subdomains of *.myradweb.net for the purpose of staging incoming site migrations, viewing site updates in the wild, or for creation of webspaces to host websites and applications without registering a paid domain name.

We need to isolate them from one another (eg: we don't want client1.myradweb.net to be able to set a cookie readable from client2.myradweb.net).

Same applies for region specific endpoints. client1.uscp.myradweb.net should not be able to set cookies readable from bob-client2.uscp.myradweb.net site.

Number of users this request is being made to serve: Currently some hundreds are already using the service, but it is estimated to increase to thousands as our clients are continuously finding new creative use-cases for use of these "staging" domains.

Rad Web Hosting automatically generates unique hostnames for every cloud instance deployed that utilizes the *.servername.us second-level domain. These hostnames also provide access to a DNS zone which can be modified and customized by client.

We need to isolate them from one another (eg: we don't want client1.servername.us to be able to set a cookie readable from client2.servername.us).

Same applies for region specific endpoints. client1.us.servername.us should not be able to set cookies readable from bob-client2.us.servername.us site.

Number of users this request is being made to serve: Currently, this system is supporting hundreds of instances.

% whois myradweb.net | grep "Registry Expiry"
Registry Expiry Date: 2024-12-25T08:53:14Z

% whois servername.us | grep "Registry Expiry"
Registry Expiry Date: 2024-10-13T09:17:28Z

DNS Verification via dig

dig +short TXT _psl.myradweb.net
"https://github.com/publicsuffix/list/pull/1760"

dig +short TXT _psl.servername.us
"https://github.com/publicsuffix/list/pull/1760"

make test

Test run successfully

@dnsguru Would this be more suitable?

@sitedata
Copy link

Test

Nice 👍

@simon-friedberger simon-friedberger added ✔️DNS _psl Validated RFC 8553 Entries were present, matching PR# ✔️Sorting Validated https://github.com/publicsuffix/list/wiki/Guidelines#sort-your-submission-correctly-important labels Nov 16, 2023
Copy link
Contributor

@simon-friedberger simon-friedberger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same applies for region specific endpoints. client1.uscp.myradweb.net should not be able to set cookies readable from bob-client2.uscp.myradweb.net site.

This does not work with the PR as is.

@sitedata
Copy link

sitedata commented Nov 16, 2023

👀

@simon-friedberger
Copy link
Contributor

simon-friedberger commented Nov 16, 2023

Same applies for region specific endpoints. client1.uscp.myradweb.net should not be able to set cookies readable from bob-client2.uscp.myradweb.net site.

This does not work with the PR as is.

If you’re referencing the fourth level domains, this will actually be solved internally.

I'm not sure how you're going to solve how browsers set cookies internally. Anyway, if you really don't need it pls remove it from the PR description.

@sclaeys
Copy link
Contributor Author

sclaeys commented Nov 16, 2023

Same applies for region specific endpoints. client1.uscp.myradweb.net should not be able to set cookies readable from bob-client2.uscp.myradweb.net site.

This does not work with the PR as is.

If you’re referencing the fourth level domains, this will actually be solved internally.

Note that all we need is the second level names added. Apologies if this was unclear.

@simon-friedberger
Copy link
Contributor

Also, the template had 10 tasks. Please put them all back and complete them.

@sclaeys sclaeys marked this pull request as draft November 19, 2023 04:18
@sclaeys
Copy link
Contributor Author

sclaeys commented Nov 20, 2023

cleaned

@simon-friedberger
Copy link
Contributor

Could you please update the top comment instead of adding more?

@sclaeys
Copy link
Contributor Author

sclaeys commented Nov 21, 2023

Could you please update the top comment instead of adding more?

Yes, good thoughts. I've made the recommended changes.

@sitedata
Copy link

Looks good 👍

@sclaeys sclaeys marked this pull request as ready for review November 29, 2023 11:22
@sclaeys
Copy link
Contributor Author

sclaeys commented Nov 29, 2023

Also, the template had 10 tasks. Please put them all back and complete them.

We've reviewed and replaced this omission. Please follow up if you spot any other errors.

@sitedata
Copy link

sitedata commented Feb 7, 2024

According to what I can find from https://github.com/publicsuffix/list/actions/runs/6877814303/job/18706150168?pr=1760 this seems good to go

@simon-friedberger
Copy link
Contributor

simon-friedberger commented Feb 9, 2024

  • Expiration (Note: Must STAY >2y at all times)
    • myradweb.net expires 2026-12-25
    • servername.us expires 2027-10-13
    • cloudsite.builders expires 2026-07-28
  • DNS _psl entries (Note: Must STAY in place)
    • myradweb.net
    • servername.us
    • cloudsite.builders
  • Tests pass
  • Sorting
  • Reasoning/Organization description

@simon-friedberger simon-friedberger added ❌FAIL - DNS VALIDATION Unable to confirm _PSL TXT = This PR # (also see #1439) ❌FAIL - DOMAIN NOT 2Y+ *ALL* names in PRIVATE section MUST hold terms of 2 years or more registration from PR date #1109 and removed ✔️DNS _psl Validated RFC 8553 Entries were present, matching PR# labels Feb 9, 2024
@sclaeys
Copy link
Contributor Author

sclaeys commented Feb 13, 2024

  • Expiration (Note: Must STAY >2y at all times)

    • myradweb.net expires 2026-12-25
    • servername.us expires 2027-10-13
    • cloudsite.builders expires 2025-07-28
  • DNS _psl entries (Note: Must STAY in place)

    • myradweb.net
    • servername.us
    • cloudsite.builders
  • Tests pass

  • Sorting

  • Reasoning/Organization description

Hello, not quite sure why the DNS _psl entry for myradweb.net wasn't available, but it's been in place since May 13, 2023.
Reference: https://dnsrecords.io/_psl.myradweb.net

Regarding cloudsite.builders, the expiration has been fixed and is now 2026-07-28.
Reference: https://rdap.identitydigital.services/rdap/domain/cloudsite.builders

Test

Add cprapid.com suffix to private section (publicsuffix#1892)
Copy link

@sitedata sitedata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Passing, by all accounts.

@simon-friedberger simon-friedberger added ✔️DNS _psl Validated RFC 8553 Entries were present, matching PR# and removed ❌FAIL - DNS VALIDATION Unable to confirm _PSL TXT = This PR # (also see #1439) ❌FAIL - DOMAIN NOT 2Y+ *ALL* names in PRIVATE section MUST hold terms of 2 years or more registration from PR date #1109 labels Feb 14, 2024
@simon-friedberger simon-friedberger added the r=simon-friedberger Marked as approved and ready to merge by @simon-friedberger label Feb 14, 2024
@sclaeys sclaeys requested a review from sitedata February 22, 2024 16:23
@sclaeys
Copy link
Contributor Author

sclaeys commented Feb 22, 2024

@dnsguru, what's the best way forward?

Copy link

@sitedata sitedata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No conflicts with merge

@dnsguru dnsguru merged commit 2b223a1 into publicsuffix:master Mar 1, 2024
1 check passed
@groundcat
Copy link
Contributor

groundcat commented Dec 29, 2024

Hello @sclaeys I have noticed that the domain myradweb.net has been returning an NXDOMAIN error. Could you please confirm whether this project is still active? If the service has been decommissioned and the domain is no longer linked to an active project, please submit a removal request from the PSL.

Additionally, the WHOIS records indicate that the domain's expiration is less than two years from now. To maintain your inclusion in the PSL, please ensure that your domain is renewed for more than two years at all times. If we do not receive a response within 30 days, your entry may be subject to removal. Thank you. #1119


Email sent

Reporting-MTA: dns; mx1.mxfilter.net
Original-Envelope-ID: <4255eaca192d4e72b559e235dbd7714a@2500cd71ab5d4c1b9c8d7cc9cb70a688>

Action: delivered
Final-Recipient: rfc822;[email protected]
Status: 2.0.0
Remote-MTA: dns; radwebhosting.com
Diagnostic-Code: smtp; 250 Ok

Action: delivered
Final-Recipient: rfc822;[email protected]
Status: 2.0.0
Remote-MTA: dns; radwebhosting.com
Diagnostic-Code: smtp; 250 Ok

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
✔️DNS _psl Validated RFC 8553 Entries were present, matching PR# r=simon-friedberger Marked as approved and ready to merge by @simon-friedberger ✔️Sorting Validated https://github.com/publicsuffix/list/wiki/Guidelines#sort-your-submission-correctly-important
Projects
Status: Done or Won't
Development

Successfully merging this pull request may close these issues.

5 participants