Setting document.domain

The algorithm in section 5.3.1 for setting document.domain does not 
cover the fact that document.domain should also throw if it is set to a 
registry controlled domain rather than one controlled by the registrant 
(as determined by e.g. the list at [1], but I don't know if that should 
be a normative reference or not).

[1] http://publicsuffix.org/