Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update prvcy.page #1859

Merged
merged 1 commit into from
May 2, 2024
Merged

Update prvcy.page #1859

merged 1 commit into from
May 2, 2024

Conversation

o3o-ca
Copy link
Contributor

@o3o-ca o3o-ca commented Sep 19, 2023

Public Suffix List (PSL) Pull Request (PR)

Each PSL PR needs to have a description, rationale, indication of DNS validation and syntax checking, as well as a number of acknowledgements from the submitter. This template must be included with each PR, and the submitting party MUST provide responses to all of the elements in order to be considered.

Checklist of required steps

  • Description of Organization

  • Robust Reason for PSL Inclusion

  • DNS verification via dig

  • Run Syntax Checker (make test)

  • Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration, and we shall keep the _PSL txt record in place in the respective zone(s) in the affected section

Submitter affirms the following:

  • We are listing any third-party limits that we seek to work around in our rationale such as those between IOS 14.5+ and Facebook (see Issue #1245 as a well-documented example)
  • This request was not submitted with the objective of working around other third-party limits
  • The Guidelines were carefully read and understood, and this request conforms
  • The submission follows the guidelines on formatting and sorting

For Private section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to rollback, if at all.

To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.

PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.

(Link: about propagation/expectations)

  • Yes, I understand. I could break my organization's website cookies etc. and the rollback timing, etc is acceptable. Proceed.

Description of Organization

About O3O Foundation

The O3O Foundation is a non-profit tech collective based in Canada, dedicated to serving Chinese language users worldwide by providing open-source and privacy-conscious services and tools. We firmly believe that social organizations should take charge of communication platforms and infrastructure, removing control from large corporations and governments.

With a user base exceeding 20,000 people, our mission is to empower users by granting them access to a range of open-source services designed to prioritize privacy, promote freedom of speech, and safeguard digital sovereignty.

We recognize the unique circumstances faced by our predominantly Chinese user base, where the luxury of utilizing privacy-respecting services and enjoying freedom of speech is limited. We host seven open-source services, with four of them being decentralized/federated platforms. These platforms serve as alternatives to mainstream social media platforms, offering a decentralized and censorship-resistant environment.

Organization Websites:

https://o3o.foundation

https://registry.prvcy.page/

About the prvcy.page domain associated with this PR

The "prvcy.page" domain is a new project managed by the O3O Foundation. It serves the purpose of promoting awareness in privacy and security. The project has dedicated this domain name for this specific purpose and allows the public to register subdomains under prvcy.page at https://registry.prvcy.page/ .

At the moment of submitting this PR, the "prvcy.page" domain is currently set to expire at 2026-08-05T04:31:59Z but will be renewed. It is intended for long-term operation, indicating our commitment to maintaining the domain and its associated services for an extended period.

WHOIS & Abuse Reporting Implementation

"prvcy.page" domain has a WHOIS server whois.prvcy.page for performing WHOIS lookups at port 43. A web-based WHOIS service is also available.

The domain has an abuse reporting mechanism to report any abusive or malicious activities.

More information about this is available at the registry's homepage.

Reason for PSL Inclusion

The "prvcy.page" domain should be included in the public suffix list (PSL) due to the following reasons:

  1. User (third-party) content is served from subdomains of "prvcy.page": Including the "prvcy.page" domain in the PSL will help in distinguishing it as a separate entity. This differentiation is crucial for security and privacy purposes.

  2. Stymie cookie stuffing attacks: By adding the "prvcy.page" domain to the PSL, it can help prevent cookie stuffing attacks across the subdomains.

History of the "prvcy.page" domain in the PSL

The "prvcy.page" domain was initially registered by "PrivacyTools.io" with the intention of making it available for public registration and adding it to the Public Suffix List (PSL) on Apr 16, 2019 (PR #803).

However, they did not launch the proposed project and eventually allowed the domain to expire.

They also had not removed this domain from the PSL.

Years later, in 2023, we registered the expired domain name and took over its management. We recognized the value and potential of the domain in promoting privacy and security, and we will dedicate to maintaining and expanding its services ever since.

Number of users

Number of users this request is being made to serve:

The registry homepage displays registry statistics, including the number of active domains. The page is updated daily, reflecting the growth and popularity of the domain.

The exact number of registrants in the future is uncertain, but it is expected to increase over time.

DNS Verification via dig

$ dig +short TXT _psl.prvcy.page
"https://github.com/publicsuffix/list/pull/1859"

Results of Syntax Checker (make test)

PASS: libpsl_icu_load_dafsa_fuzzer
PASS: libpsl_icu_fuzzer
PASS: libpsl_icu_load_fuzzer
============================================================================
Testsuite summary for libpsl 0.21.2
============================================================================
# TOTAL: 3
# PASS:  3
# SKIP:  0
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0
============================================================================
Making check in tests
  CC       test-is-public.o
  CC       test-is-public-all.o
  CC       test-is-cookie-domain-acceptable.o
  CC       test-is-public-builtin.o
  CC       test-registrable-domain.o
  CCLD     test-is-cookie-domain-acceptable
  CCLD     test-is-public
  CCLD     test-is-public-builtin
  CCLD     test-is-public-all
  CCLD     test-registrable-domain
PASS: test-is-public-builtin
PASS: test-is-public
PASS: test-is-cookie-domain-acceptable
PASS: test-registrable-domain
PASS: test-is-public-all
============================================================================
Testsuite summary for libpsl 0.21.2
============================================================================
# TOTAL: 5
# PASS:  5
# SKIP:  0
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0
============================================================================
Making check in msvc

@o3o-ca o3o-ca marked this pull request as ready for review September 19, 2023 05:45
@simon-friedberger
Copy link
Contributor

simon-friedberger commented Sep 20, 2023

There seems to be an issue with the registration, it is not valid for at least two years:
Registry Expiration: 2026-08-05 04:31:59 UTC

(Edit: Not sure which year I thought we currently have.)

There may also be a relevance issue since the website states:

Registry Statistics

Last Update Domain Count
2023-09-20 19:50:04 31

But since this is only a change of organization and the rule is already included this is probably fine.

Other checks:

  1. _psl.prvcy.page exists and points to this PR.
  2. Sorting is correct.
  3. The syntax checker succeeds.
  4. The organization o3o.foundation is mentioned as the owner at prvcy.page

@o3o-ca
Copy link
Contributor Author

o3o-ca commented Oct 5, 2023

Hello @simon-friedberger

Thank you for your response!

The domain's registration has been extended for another year, just in case, and the current registry information is as follows. This service has been committed to operate for the foreseeable future.

Registry Expiration: 2027-08-05 04:31:59 UTC
Updated: 2023-10-04 06:12:22 UTC
Created: 2023-08-05 04:31:59 UTC

Since we only began accepting registrations two weeks ago, the number of registrations is currently small but growing. As of today (October 5, 2023), we have 51 active domains registered. The registry homepage displays registry statistics, including the number of active domains, for transparency on utilization. The page is updated every day to reflect the expansion and rising usage of the domain.

I am grateful for your assistance in reviewing the pull request, as well as the effort of all other volunteers who have been maintaining the Public Suffix project!

@mozfreddyb mozfreddyb added NOT IOS FB Submitter attests PR is not #1245 related ✔️DNS _psl Validated RFC 8553 Entries were present, matching PR# ✔️Sorting Validated https://github.com/publicsuffix/list/wiki/Guidelines#sort-your-submission-correctly-important labels Oct 17, 2023
@simon-friedberger simon-friedberger merged commit 363a349 into publicsuffix:master May 2, 2024
1 check passed
@openhost-registry openhost-registry mentioned this pull request Aug 24, 2024
11 tasks
@@ -13865,6 +13865,10 @@ pcloud.host
// Submitted by Matthew Brown <mattbrown@nyc.mn>
nyc.mn

// O3O.Foundation : https://o3o.foundation/
// Submitted by the prvcy.page Registry Team <psl@registry.prvcy.page>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello @o3o-ca just a heads-up that the email address you left in the comment section is not valid, as the domain of your email address doesn't have MX records, so it won't be reachable if the PSL maintainers or volunteers try to contact you or your organization in the future. It's recommended to either fix the email account or submit an amendment to update it to a valid one. Thank you.

Copy link
Contributor Author

@o3o-ca o3o-ca Sep 19, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! We are updating it in #2182

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
✔️DNS _psl Validated RFC 8553 Entries were present, matching PR# NOT IOS FB Submitter attests PR is not #1245 related ✔️Sorting Validated https://github.com/publicsuffix/list/wiki/Guidelines#sort-your-submission-correctly-important
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants