864704 - Add csiro.au to PSL

Status: RESOLVED FIXED

(Core Graveyard :: Networking: Domain Lists, defect)

Description

[Gervase Markham [:gerv]]

csiro.au have contacted us and asked that they be added back to the PSL.

There is definitely a bug one way or the other. No-one disputes that csiro.au exists, and if it's not listed, then there should be a simple "au" entry which would include it explicitly. But there is not.

I have proposed to CSIRO, and they have agreed, that we should add csiro.au back to the list in the historical section of the .au area.

weppos: can you produce a patch? :-)

Related: bug 791770, which removed csiro.au.

Gerv

Comment 1

[Simone Carletti]

I'll prepare a patch asap.

Comment 2

[Gervase Markham [:gerv]]

Attachment: Patch v.1

Comment 3

[Gervase Markham [:gerv]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/aac78788c186

Gerv

Comment 4

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/aac78788c186

Comment 5

[Wan-Teh Chang]

Comment on attachment 773914 [details] [diff] [review]
Patch v.1

Review of attachment 773914 [details] [diff] [review]:
-----------------------------------------------------------------

::: netwerk/dns/effective_tld_names.dat
@@ +225,4 @@
>  // Historic 2LDs (closed to new registration, but sites still exist)
>  info.au
>  conf.au
>  oz.au

Gerv, you said:
> I have proposed to CSIRO, and they have agreed, that we should add
> csiro.au back to the list in the historical section of the .au area.

But you added csiro.au above the "Historic 2LDs ..." comment line.

Comment 6

[Gervase Markham [:gerv]]

(In reply to Wan-Teh Chang from comment #5)
> Gerv, you said:
> > I have proposed to CSIRO, and they have agreed, that we should add
> > csiro.au back to the list in the historical section of the .au area.
> 
> But you added csiro.au above the "Historic 2LDs ..." comment line.

It's true, I did. 

Are you suggesting we should move csiro.au into the private use area at the bottom? Would that affect how it is viewed by Google's wildcard-cert-checking code?

Gerv

Comment 7

[Wan-Teh Chang]

(In reply to Gervase Markham [:gerv] from comment #6)
>
> Are you suggesting we should move csiro.au into the private use area at the
> bottom?

I was actually just pointing out that you didn't seem to add csiro.au to the
historical section of the .au area.

But indeed, I am interested in a solution to the *.csiro.au wildcard
certificate problem with Chromium.

Moving csiro.au into the private use area at the bottom should solve the
wildcard certificate problem. But I think a better solution is to simply
remove csiro.au. As far as I can tell, "csiro.au" should be treated like
"rcuk.ac.uk" and "nsf.gov".

Comment 8

[Gervase Markham [:gerv]]

The csiro.au folks went through "a lot of effort" (their words) to get csiro.au added to the PSL, because otherwise they had a problem with some other Google service! So removing them might solve this problem, but would create another. Talk to Ryan, if you haven't already. I can also give you a contact at CSIRO who can explain.

Gerv