Open
Conversation
ml.ink is a cloud deployment platform that provisions customer
applications on subdomains of ml.ink (e.g., {name}.ml.ink).
Adding to the PSL to prevent cross-subdomain cookie attacks
between tenants.
Member
I have a general problem with this statement. I may be reading it wrong, but my read of this statement is that it seems to create a presumptive trajectory or outcome. It is not "we're like this, so just include our requested project". There are many many criteria to meet |
You are required to provide user counts (the amount of users that are getting a subdomain from the submitted entry). Please edit your PR Template and add it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Public Suffix List (PSL) Submission
Checklist of required steps
dig_pslTXT record in place in the respective zone(s).Submitter affirms the following:
_pslDNS entry, and responding to e-mails to the supplied address. Failure to maintain entries may result in removal of individual entries or the entire section.Abuse Contact:
For PRIVATE section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to rollback, if at all.
To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.
PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.
(Link: about propagation/expectations)
Description of Organization
ml.ink is a cloud deployment platform that lets developers deploy and host applications. Each customer application is provisioned on its own subdomain under
ml.ink(e.g.,myapp.ml.ink). Customers control their individual subdomain and application only.Organization Website: https://ml.ink
Reason for PSL Inclusion
ml.ink is a multi-tenant hosting platform where each customer receives an independent subdomain under
ml.ink. PSL inclusion ensures proper domain-level isolation between tenants, consistent with how browsers scope cookies, certificates, and other origin-based security boundaries.This is architecturally identical to other multi-tenant hosting services already in the PRIVATE section such as
vercel.app,herokuapp.com,netlify.app,pages.dev,fly.dev, andrailway.app. PSL inclusion is the industry standard for platforms of this kind.The domain
ml.inkis registered through 2028 and will be renewed well in advance.Number of users this request is being made to serve: Growing platform with active tenants on
*.ml.inksubdomains.DNS Verification
Verified: