News for hackers. Stuff that matters.

A comment on Let's Encrypt root certificate trusted by Mozilla. Parent comment

Re:Let's Encrypt root certificate trusted by Mozilla by pfg on Friday August 05, 2016 @08:16PM (#12236475)
Dynamic DNS providers that are on the Public Suffix List are essentially treated like TLDs in terms of rate limiting, meaning each client subdomain has a separate counter. They should probably be on the PSL anyway; browsers rely on it for cookie scoping.
[ Parent | on HN ]
Re:Let's Encrypt root certificate trusted by Mozilla by tracker1 on Saturday August 06, 2016 @01:14AM (#12237139)
True enough, but would be nice if it detected that the SOA IP corresponds to a public suffix dns provider.

Also, not sure where to put public suffix list additions for such a provider... I was going to add bbs.io, as well as say the top 25 domains for freedns.afraid.org, but wasn't sure where to add them.

[ Parent | on HN ]
Re:Let's Encrypt root certificate trusted by Mozilla by pfg on Saturday August 06, 2016 @06:00AM (#12237622)
The process is described here[1]. It needs to be performed by the domain owner.

[1]: https://publicsuffix.org/submit/

[ Parent | on HN ]