Re: [whatwg/url] Define hosts' public suffix and registrable domain. (#391)

> @mikewest so that means you can never be same site with appspot.com, even if you are appspot.com

This seems fine to me, at least partially because I'm not comfortable with actually serving anything from a public suffix, and I'm surprised every time I rediscover that we allow it. :)

You also can't set `appspot.com` as `document.domain`, nor can you set cookies at `appspot.com`. As Ryan notes, I don't actually expect this to have much web-visible impact due to those kinds of constraints, aside from the wildcard case which I think I misunderstood above. (The difference there, though, is not the registrable domain behavior, but the behavior of the wildcard in defining whether a given domain is a public suffix).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/url/pull/391#issuecomment-392690251