Disallow setting Cookies on domains suffixes on the Public Suffix List

[sethmlarson]

trafficstars

This feature prevents putting a cookie on a domain prefix that multiple parties are capable of registering sub-domains with.

Public Suffix List: https://publicsuffix.org

There are two libraries in existence already (publicsuffix and publicsuffixlist) however they both are in the same boat of not providing a sans-I/O way of updating the list when it's too old and also don't update their pre-packaged list very often.

My proposed solution is to create a library with automated deployments similar to hstspreload and then also providing a mechanism that any HTTP library can update the packaged list via their own fetching mechanism.

[sethmlarson]

The "psl" package has been published to PyPI. After a successful automated deploy I'll be moving the package under the python-http org.

GitHub: https://github.com/sethmlarson/psl PyPI: https://pypi.org/project/psl

[lovelydinosaur]

Okay, that's interesting. Not entirely obvious to me that we need to treat this as a requirement, but possibly.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[lovelydinosaur]

Okay, gonna close this one off pending any further feedback / prodding from users.