[JIRA] Commented: (TS-2) TestShib allows high level domains as Scope values

[Ian Young (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/TS-2?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13726#comment-13726 ] 

Ian Young commented on TS-2:
----------------------------

Ideally, it should use the Public Suffix List to determine what is allowed.

http://publicsuffix.org/

Unfortunately, there is no Java-based bean-style implementation of this available that I can see, suitable for use in an aggregator pipeline.  There is an old implementation at SourceForge that takes the data file from the class path but that comes with an old version of the file, making it difficult to deploy.

I need something of this kind for the UK federation metadata checks, so I may find myself coding an implementation of the public suffix thing at some point that I could contribute.

> TestShib allows high level domains as Scope values
> --------------------------------------------------
>
>                 Key: TS-2
>                 URL: https://issues.shibboleth.net/jira/browse/TS-2
>             Project: TestShib
>          Issue Type: Bug
>          Components: Metadata
>            Reporter: Chad La Joie
>            Assignee: Chad La Joie
>             Fix For: 1.0.0
>
>
> TestShib allows things like "com" and "ac.uk" as Scope values.  That's bad.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira