Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Public Suffix List (PSL) Submission
Checklist of required steps
Description of Organization
Robust Reason for PSL Inclusion
DNS verification via dig
Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration, and we shall keep the
_psl
TXT record in place in the respective zone(s).We are listing any third-party limits that we seek to work around in our rationale such as those between IOS 14.5+ and Facebook (see Issue #1245 as a well-documented example)
This request was not submitted with the objective of working around other third-party limits.
The submitter acknowledges that it is their responsibility to maintain the domains within their section. This includes removing names which are no longer used, retaining the _psl DNS entry, and responding to e-mails to the supplied address. Failure to maintain entries may result in removal of individual entries or the entire section.
Abuse Contact:
Abuse contact information (email or web form) is available and easily accessible.
URL where abuse contact or abuse reporting form can be found:
https://nebius.com/report-abuse
For PRIVATE section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to rollback, if at all.
To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.
PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.
(Link: about propagation/expectations)
Description of Organization
Nebius is a cloud provider with focus on AI workloads. It provides multiples services like compute, gpu, network infrastructure, managed k8s, object storage and so on. Object Storage specifically is the reason for this inclusion.
I am a lead developer of Nebius Object Storage.
Organization Website:
https://nebius.com/
Reason for PSL Inclusion
Our Object Storage service has S3-compatible API. Which means for every bucket users create we provide a subdomain, like
foo.storage.eu-north1.nebius.cloud
. Also user uploaded objects can be accessed with path-like scheme: for examplestorage.eu-north1.nebius.cloud/foo/...
. This rises security concerns for our users, as setting cookies to base domain can be abused and affect other clients.So the main and only reason for this PR is to restrict setting cookies to our storage main domains, as it contains users generated (provided) data.
Number of users this request is being made to serve:
It is hard to determine specific number of users, but right now we have around 5K user buckets in our installations.
DNS Verification