Add myshopify.com

[richter-alex]

• Description of Organization

• Reason for PSL Inclusion

• DNS verification via dig

• Run Syntax Checker (make test)

• Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration.

Description of Organization

Organization Website: https://www.shopify.com

My name is Alex, I'm an Application Security Engineer at Shopify.

Shopify is an e-commerce organization. We provide merchants with tools and services to sell their products online and/or in-person, with the ultimate goal of making commerce better for everyone.

Reason for PSL Inclusion

In addition to allowing merchants to purchase and/or connect their domain name to their shops, we provision all new merchants with a *.myshopify.com subdomain. Because of this, requests between shops using *.myshopify.com domains are considered to be samesite, leaving them open to CSRF.

We're looking to add myshopify.com to the Public Suffix List to improve cookie security for all of our merchants who do not yet make use of a custom domain.

DNS Verification via dig

> dig +short TXT _psl.myshopify.com
"https://github.com/publicsuffix/list/pull/1179"

make test

Tests passed OK.

[dnsguru]

• description accepted
• test passes
• no conflict with base
• dns authentication ok

APPROVE

[dnsguru]

#1245