Public Suffix List

The public suffix list ( English , such as list of public submissions ) is one of the Mozilla Foundation maintained list of known TLDs under which Internet users own domains register can. The list is used in the web browsers Mozilla Firefox , Google Chrome and Opera to limit the scope of HTTP cookies .

content

The list contains all generic and country-specific top-level domains , but also domains on the second or third level that are open to the public for registering domains. In the case of .uk , for example , all second-level domains are included ( * .uk ) in order to cover endings such as .me.uk and .co.uk . The list also contains some domain or web services that assign individual subdomain names to their users, for example DynDNS or Blogspot .

The respective registry for their domain endings must apply for inclusion in the Public Suffix List . Mozilla therefore does not guarantee that the Public Suffix List is always up to date. For example, .post and .cw were not entered in January 2013 , although the endings were already actively used.

use

The Public Suffix List is used to limit the scope of HTTP cookies . If a web browser accesses a website www.example.org , the web server can also set a cookie for the domain example.org . If the web browser were to accept the cookie for org too , an attacker could set cookies that are sent when you visit other websites such as mozilla.org . With the Public Suffix List, web browsers can reject cookies for public domain extensions such as .org or .co.uk . Google Chrome also uses the list to decide whether an entry in the address bar is a domain name or a search query .

Individual evidence

↑ ^a ^b Learn more about the Public Suffix List. Mozilla Foundation, accessed May 5, 2013 .
^ View the Public Suffix List. Mozilla Foundation, accessed April 5, 2014 .
↑ Florian Hitzelberger: Is an nTLDs browser disaster looming? In: domain-right. May 3, 2013, accessed on May 5, 2013 : “In practice, this“ Public Suffix List ”often does not keep up with the latest developments in the introduction of new top level domains. In January 2013, neither the new country extension .cw (Curaçao) nor the generic ending .post had been added to the list, although .cw was already shortly before Christmas 2010 and .post was in the IANA database of all the top ones at the beginning of August 2012 Level domains had been registered. Anyone who nevertheless called domains with one of these endings only received an error message or was forwarded to the Google search. "

[about-1] Learn more about the Public Suffix List. Mozilla Foundation, accessed May 5, 2013 .

[2] View the Public Suffix List. Mozilla Foundation, accessed April 5, 2014 .

[3] Florian Hitzelberger: Is an nTLDs browser disaster looming? In: domain-right. May 3, 2013, accessed on May 5, 2013 : “In practice, this“ Public Suffix List ”often does not keep up with the latest developments in the introduction of new top level domains. In January 2013, neither the new country extension .cw (Curaçao) nor the generic ending .post had been added to the list, although .cw was already shortly before Christmas 2010 and .post was in the IANA database of all the top ones at the beginning of August 2012 Level domains had been registered. Anyone who nevertheless called domains with one of these endings only received an error message or was forwarded to the Google search. "