{"eid":"github-publicfreesuffix","name":"Public Free Suffix","domain":"github.com","resolved_by":"platform","topics":["domains-dns"],"n_records":1,"best_vorder":1,"review":null,"aliases":["Public Free Suffix","github.com"],"records":[{"rid":"domains-dns/public-free-suffix","card":{"rid":"domains-dns/public-free-suffix","eid":"github-publicfreesuffix","topic":"domains-dns","slug":"public-free-suffix","provider":"Public Free Suffix","url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","domain":"github.com","category":"free registrable subdomain","tier":null,"verdict":"qualifies-with-caveat","vorder":1,"grp":"usable","self_hosted":0,"confidence":"documented","binding":"write-gated","identity_kind":"email","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":null,"egress_metered":0,"per_object_bytes":null,"retention_days":30,"verified_at":"2026-11-03T16:43:10.325Z","verified_basis":"live","checked_on":"2026-11-03","stale_on":"2026-12-04","n_evidence":8,"usd_month":null,"usd_per_tb_month":null,"summary":"one free label under any of six live suffixes (bg5.net, is-a.si, nastu.net, tun.re, us.mw, pfsdns.org), resolved on the operator's DNS with A, AAAA, MX, NS, ...","duplicate_of":null,"n_unknown":1,"free_unit":"objects"},"record":{"topic":"domains-dns","slug":"public-free-suffix","provider":"Public Free Suffix","url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","category":"free registrable subdomain","free_tier":{"stated":"one free label under any of six live suffixes (bg5.net, is-a.si, nastu.net, tun.re, us.mw, pfsdns.org), resolved on the operator's DNS with A, AAAA, MX, NS, CAA, TXT, CNAME, ALIAS and HTTPS records; no annual fees","unit":"objects","source_url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","read_on":"2026-11-03","metered_on":"object-count"},"per_object_cap":{"stated":"one label under a suffix, never a nested name: myname.is-a.si works and my.name.is-a.si does not; the number of labels per account is not stated on the page read","bytes":null},"retention":{"stated":"a domain left empty for 30 consecutive days is reclaimed; no renewal term is stated","days":30,"source_url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix"},"egress":{"terms":"no query cap published","metered":false,"free_allowance":null,"price_per_tb":null,"source_url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix"},"interface":["unknown"],"interface_detail":"a web console at s.eus/domains for search, registration and every record; the earlier pull-request flow has been retired; no record API was read","tooling":"the SEUS domain console, then any host that takes a DNS record","chaining":"a label with NS records offered in the same console, so delegation to an external DNS service is a record the registrant can set; the suffixes were not found in the captured Public Suffix List, so each name shares one Let's Encrypt count with every user of the suffix","limits":[{"kind":"write-gated","value":"a GitHub account at least 2 years old is required, and the account is verified in the console","source":"https://github.com/PublicFreeSuffix/PublicFreeSuffix"},{"kind":"retention-clamped","value":"a domain with no content for 30 consecutive days is reclaimed","source":"https://github.com/PublicFreeSuffix/PublicFreeSuffix"}],"binding":"write-gated","binding_note":"the GitHub-account-age check is the gate and the 30-day empty-name reclaim is the clock; the operator can reclaim a name, so the owner of the suffix can withdraw it; the zone is on the operator's DNS unless the registrant sets NS records","identity_cost":{"kind":"email","detail":"an account on the operator's console with a verified GitHub account at least 2 years old; no phone and no card are named on the README","country":null},"reliability_note":"an empty name is reclaimed after 30 consecutive days, the operator can end a name, the flow changed from pull requests to a console within 2025 to 2026, and the suffixes are not on the Public Suffix List, which is an inference from absence","confidence":"documented","confidence_note":"the repository README was read and quoted; the console and the agreements were not read; the Public Suffix List statement is an inference from the absence of an entry and cannot be quoted","evidence":[{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"six live suffixes and one label under any of them","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"Six live zones. One label under any suffix, while names last."},{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"a verified GitHub account at least 2 years old is required","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"Your GitHub account must be at least 2 years old; verification keeps the zone safe for everyone."},{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"an empty name is reclaimed after 30 consecutive days","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"Domains left empty for 30 consecutive days are reclaimed, so names go to people who actually use them."},{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"the console hosts the zone and offers A, AAAA, MX, NS, CAA, TXT, CNAME, ALIAS and HTTPS records","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"A, AAAA, MX, NS, CAA, TXT, CNAME, ALIAS, HTTPS, and more, all managed in the same console."},{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"a name is a single label under the suffix","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"A domain is a single label under the suffix: `myname.is-a.si` works, `my.name.is-a.si` does not."},{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"there are no annual fees","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"No annual fees, ever."},{"url":"https://github.com/PublicFreeSuffix/PublicFreeSuffix","date":"2026-11-03","proved":"the pull-request registration flow has been retired in favour of the console","capture":"sha256:b4bd7a3031d462d47f114f1dfd85c05b85579926e02ad5d1a42f826b38c58029","quote":"That flow has been retired;"},{"url":"https://letsencrypt.org/docs/rate-limits/","date":"2026-11-03","proved":"Let's Encrypt counts 50 certificates per registered domain in 7 days, and finds the registered domain with the Public Suffix List","capture":"sha256:b5eee1fee7260f24a875dbca422432161e1e6e37041c64df017d7057af897c00","quote":"Up to 50 certificates can be issued per registered domain (or IPv4 address, or IPv6 /64 range) every 7 days."}],"verdict":"qualifies-with-caveat","verified_at":"2026-11-03T16:43:10.325Z","price_per_tb_month":null,"notes":"Two binds: the account-age gate, and an operator clock that reclaims an empty name after 30 days, so the owner of the suffix can withdraw it. The zone starts on the operator's DNS, and NS records let the registrant delegate. The TLS limit is a risk here: the suffixes have no entry in the captured Public Suffix List, so each suffix is one registered domain for Let's Encrypt, which is an inference from absence."},"claims":[{"path":"$.free_tier","kind":"has-free-tier","num":1.0,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:write-gated","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[1].value","kind":"limit:retention-clamped","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[["$.interface","interface-unknown"]],"history":[],"drift":[]}]}