Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reserved domains off #815

Merged
merged 5 commits into from
Dec 5, 2019
Merged

Conversation

cctldru
Copy link
Contributor

@cctldru cctldru commented May 16, 2019

Description of Organization

Coordination Center for TLD RU (CC for TLD RU) is administrator of national top level domains .RU and .РФ (national registry).
Organization Website: https://cctld.ru

Reason of this Pull Request

  1. CC for TLD RU changed the rules and there are no Reserved domain names at Top level domain .RU at this time.

Domains

ac.ru
edu.ru
gov.ru
int.ru
mil.ru
test.ru

is the regular domain names now.

  1. New URL for Term and Conditions in section xn--p1ai

Deleting reserved .RU domains from PublicSuffixList

There are no Reserved domain names at Top level domain .RU at this time.

https://cctld.ru/en/domains/domens_ru/reserved/
Changing xn--p1ai (рф) section

Up today URL for Terms and Conditions of Domain Name Registration in .RU and .РФ
@sleevi
Copy link
Contributor

sleevi commented May 17, 2019

Thanks! Based on the e-mail addressed provided, I'm guessing you're a representative of the registry operator? We'll work to confirm if you want to go forward, but I do want to highlight that removing these entries would pose serious risk and harm to anyone still in possession of domain registrations within this namespace.

Can you confirm that there are no more registered domains in the edu.ru namespace? Does ccTLDru operate edu.ru on a registrar basis (i.e. not reserved by the registry, but still permitted for registrations?)

For example, is this PR is accepted, pnu.edu.ru would be able to set cookies and other security policy, including possibly compromising, edem.edu.ru and molbiol.edu.ru. I don't think that's quite what you intended, though?

@sleevi sleevi added 🩺 pending-validation Something needs to be validated ❔❔ question Open question, please look / answer / respond labels May 17, 2019
@cctldru
Copy link
Contributor Author

cctldru commented May 20, 2019

Hi!

I confirm my to authority to present the Coordination Center for TLD .RU and .РФ (.xn--p1ai) (ccTLDru). My name George Georgievsky -- Head of department of work with Registrars and Registrants at .RU and .РФ.

ccTLDru is the Registry and never was operator (registrant or registrar) of reserved_domain_names for special use.

ccTLDru canceled type of domain names for special use (reserved domains) 01 September 2018. But that domain names (ac.ru, edu.ru, gov.ru, int.ru, mil.ru, test.ru) still registered and have his owners (registrants).

My request is changing up information about reserved domains to actual.

The edu.ru domain is a regular domain name in .ru now.

Third level domains in edu.ru supporting by registrant of edu.ru: Federal state autonomous educational establishment of additional professional education "Center of Realization of State Educational Policy and Informational Technologies" (CRSEPIT) - who operating edu.ru namespace == Registry for third level domains in edu.ru.

Changing requests for edu.ru and third level domains in edu.ru must send CRSEPIT.
I confirm that Alexander Kozlov abk@informika.ru is the response person in edu.ru.

CRSEPIT have some troubles now with Global Sign CA and can not to receive Wildcard SSL for edu.ru with edu.ru string in Public Suffix List.

@sleevi
Copy link
Contributor

sleevi commented May 20, 2019

Thanks!

To try and make sure I understand the situation correctly, to figure out next steps:
Prior to 2018-09-01, the domains ac.ru, edu.ru, gov.ru, int.ru, mil.ru, test.ru were specially reserved by Registry policy, delegating authority out to appropriate entities.
On/After 2018-09-01, these domains are no longer special-reserved by policy. They are, however, still registered domains, effectively transitioned to the prior authorities, and many have third-level domain registrations underneath them.

It sounds like we should look at moving these domains from the ICANN section (set aside for policy) to the PRIVATE section. However, I do want to stress: the proposed change will negatively affect the security of any third-level domains within that namespace, and thus may not be a desirable decision to make. Is this something you'd be willing to bring to the attention of each of these registrants, and see if we can get them engaged on this Pull Request as well? I really don't want to be the one responsible for, e.g., exposing mil.ru to a host of new attacks 😬

@cctldru
Copy link
Contributor Author

cctldru commented May 20, 2019

You correctly understand the situation in the first paragraph.

These domains definitely should not be in the ICANN section, and I agree that they need to be moved to the PRIVATE section. But if I understand the PSL rules correctly: should the registrants of these domains send the request of changes themselves?

And it seems to me that transferring to the PRIVATE section will not fix the problem with getting wildcard SSL for CRSEPIT

ccTLDru for its part will inform registrants of these domains about changes in PSL and possible consequences and how they can submit amendments to the PCL.

@cctldru
Copy link
Contributor Author

cctldru commented May 29, 2019

We have a new information from edu.ru registrant: transferring to the PRIVATE section will give them possibility to get wildcard SSL at GlobalSign. You can move
ac.ru
edu.ru
gov.ru
int.ru
mil.ru
test.ru

to private section.

@cctldru
Copy link
Contributor Author

cctldru commented Jun 26, 2019

Follow up, please.

Changed comments for domain
ru dnf domain рф.

Domains:
ac.ru
edu.ru
gov.ru
int.ru
mil.ru
test.ru

moved to PRIVATE DOMAINS section
@cctldru
Copy link
Contributor Author

cctldru commented Jul 30, 2019

New pull request:

Changed comments for domain
ru and domain рф.

Domains:
ac.ru
edu.ru
gov.ru
int.ru
mil.ru
test.ru

moved to PRIVATE DOMAINS section

@cctldru
Copy link
Contributor Author

cctldru commented Aug 8, 2019

Follow up, please and validate new pull request!

@sleevi
Copy link
Contributor

sleevi commented Dec 5, 2019

Thanks. I'm going to go ahead and merge this. Individual owners for those domains could be separated out, but for situations like this (where the registry used to reserve them), I have no objections to listing the registry as the (old) contact, to preserve the behaviour.

@sleevi sleevi merged commit 49872f4 into publicsuffix:master Dec 5, 2019
@sleevi sleevi mentioned this pull request Dec 5, 2019
4 tasks
@jeffrey-pinyan-cleandns jeffrey-pinyan-cleandns mentioned this pull request Jul 6, 2023
10 tasks
jeffrey-pinyan-cleandns added a commit to jeffrey-pinyan-cleandns/publicsuffix-list that referenced this pull request Jul 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🩺 pending-validation Something needs to be validated ❔❔ question Open question, please look / answer / respond
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants