Hacker News new | past | comments | ask | show | jobs | submit login

Sites that allow users [to have significant control over] personalised subdomains are also problematic for things like NoScript and other whitelisting tools. Since I have github.com permitted, all the subdomains inherit that permission.

I'm not even sure what a good model/UI would be to selectively white/blacklist subdomains.




That is a problem only because Github uses the root domain for its own pages. They could rather use www.github.com.

To solve your case on NoScript, whitelist the full address https://github.com/ and that will keep http subdomains out.


Maybe github should use a different TLD for pages? Like Githubpages.com ?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: