On 16/10/12 21:14, Dan Veditz wrote:
On 10/15/12 11:36 AM, Gervase Markham wrote:
Can we do a hybrid system, where for whitelisted TLDs we accept
registered domains as found and then apply the algorithm to the rest of
the labels [...]

Hmm. Possible, but certainly more confusing. Ideally, the TLD whitelist
would go away eventually. I don't want to rip it out as the new
algorithm comes in because there's a higher risk of breaking people's
currently-working domains by mistake.

And I don't want to expand the whitelist more than double or triple by
numbers of registered domains to include .com

I'm not sure what you mean by "expand by double or triple". It's a TLD whitelist, it current contains 72 non-test TLDs, and this discussion is about adding 3 more (.com, .net and .name).

when ideally we don't need
it. Especially if that then becomes an argument for a permanent spot on
the whitelist.

Well, we could stop adding domains to the whitelist if we committed the patch with the new algorithm. It's been waiting for your security review for 6 months...

https://bugzilla.mozilla.org/show_bug.cgi?id=722299

Gerv


_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to