Hacker News Reader

I'm glad the PSL exists, but it's a really ugly hack. The public-ness of a domain should be a queryable DNS record. We shouldn't make tons of programs bundle what's essentially an out of band zone file when we could just use DNS as intended.

Yes, I know about the PSL DNS query service. That's only marginally better. The public suffix flag should be a record on the domain itself.

View on HN

There is a concluded IETF WG called dbound (I don't know why it concluded!) and a current Internet-Draft about doing this:

https://datatracker.ietf.org/doc/draft-levine-dbound-dns/

It concluded because, despite everyone agreeing they wanted a unicorn, they couldn’t agree which breed of unicorn they wanted, and thus were unable to get one.

Which is to say: things went wrong in circles because different folks had different problems, those different problems had incompatible requirements, and so things spun in circles for a number of years as every idea failed to solve the problem for everyone simultaneously, while narrowly-specified solutions were shot down for not solving enough problems.

Is it still plausible that the remaining I-D will advance to an RFC?

Perhaps? But I’m not aware of anyone (besides the DMARC crew) who could implement this, or even having been involved, so it seems mostly moot?

Reply on news.ycombinator.com