TXT record attests ownership for the Public Suffix List

We want to place sslip.io on the Public Suffix List so we don't need to
pester Let's Encrypt for rate limit increases.

According to https://publicsuffix.org/submit/:

> owners of privately-registered domains who themselves issue subdomains
to mutually-untrusting parties may wish to be added to the PRIVATE
section of the list.

References:

- https://publicsuffix.org/
- https://github.com/publicsuffix/list/pull/2206

[Fixes #57]
This commit is contained in:
Brian Cunnie
2024-10-08 18:08:59 -07:00
parent 39d876079c
commit dea655a990
2 changed files with 13 additions and 0 deletions

View File

@@ -174,6 +174,10 @@ var _ = Describe("sslip.io-dns-server", func() {
"@localhost sslip.io +short +vc", "@localhost sslip.io +short +vc",
`\A78.46.204.247\n\z`, `\A78.46.204.247\n\z`,
`TypeA sslip.io. \? 78.46.204.247\n`), `TypeA sslip.io. \? 78.46.204.247\n`),
Entry(`TXT for _psl sslip.io is a link to the pull request for putting sslip.io on the Public Suffix List`,
"@localhost _psl.sslip.io txt +short",
`\A"https://github.com/publicsuffix/list/pull/2206"\n\z`,
`TypeTXT _psl.sslip.io. \? \["https://github.com/publicsuffix/list/pull/2206"\]`),
) )
}) })
Describe("for more complex assertions", func() { Describe("for more complex assertions", func() {

View File

@@ -147,6 +147,15 @@ var (
}, nil }, nil
}, },
}, },
"_psl.sslip.io.": { // avoid Let's Encrypt rate limits by joining https://publicsuffix.org
TXT: func(x *Xip, _ net.IP) ([]dnsmessage.TXTResource, error) {
x.Metrics.AnsweredTXTVersionQueries++
return []dnsmessage.TXTResource{
{TXT: []string{"https://github.com/publicsuffix/list/pull/2206"}},
}, nil
},
},
"metrics.status.sslip.io.": { "metrics.status.sslip.io.": {
TXT: TXTMetrics, TXT: TXTMetrics,
}, },