Add CodePen domains

[shshaw]

Public Suffix List (PSL) Submission

Checklist of required steps

• Description of Organization

• Robust Reason for PSL Inclusion

• DNS verification via dig

• Each domain listed in the PRIVATE section has and shall maintain at least two years remaining on registration, and we shall keep the _psl TXT record in place in the respective zone(s).

Submitter affirms the following:

• We are listing any third-party limits that we seek to work around in our rationale such as those between iOS 14.5+ and Facebook (see Issue #1245 as a well-documented example)

• This request was not submitted with the objective of working around other third-party limits.

• The submitter acknowledges that it is their responsibility to maintain the domains within their section. This includes removing names which are no longer used, retaining the _psl DNS entry, and responding to e-mails to the supplied address. Failure to maintain entries may result in removal of individual entries or the entire section.

• The Guidelines were carefully read and understood, and this request conforms to them.
• The submission follows the Guidelines on formatting and sorting.

• A role-based email address has been used and this inbox is actively monitored with a response time of no more than 30 days.

Abuse Contact:

• Abuse contact information (email or web form) is available and easily accessible.

  URL where abuse contact or abuse reporting form can be found:

https://codepen.test/support

---

For PRIVATE section requests that are submitting entries for domains that match their organization website's primary domain, please understand that this can have impacts that may not match the desired outcome and take a long time to roll back, if at all.

To ensure that requested changes are entirely intentional, make sure that you read the affectation and propagation expectations, that you understand them, and confirm this understanding.

PR Rollbacks have lower priority, and the volunteers are unable to control when or if browsers or other parties using the PSL will refresh or update.

(Link: about propagation/expectations)

• Yes, I understand. I could break my organization's website cookies and cause other issues, and the rollback timing is acceptable. Proceed anyway.

---

Description of Organization

CodePen is an online code editor for front-end websites ("Pens") and social network for sharing interesting code. I'm Stephen Shaw, developer at CodePen.

A Pen usually contains HTML, CSS and JavaScript and development previews are hosted at codepen.dev. The preview has a subdomain that's unique to Pen and, for editors of a Pen, unique to the user. These subdomains are generated automatically based on the Pen and the session user.
E.g. https://45137255e42e464b6b3bf13cde2f6eaa.codepen.dev/ - Unique subdomain for viewers of a Pen
E.g. https://es-d-14215068720260809-45137255e42e464b6b3bf13cde2f6eaa.codepen.dev/ - Unique subdomain for a specific User editing a Pen

Pens can be deployed to codepen.app subdomains for proper website hosting/full-screen previews. They're provided a unique subdomain of three random words separated by dashes. These subdomains are generated automatically when a user chooses to Deploy a Pen.
E.g. https://open-cherry-piglet.codepen.app/

Organization Website:

https://codepen.io

Reason for PSL Inclusion

CodePen renders user-authored code at two domains: codepen.dev and codepen.app. Both should be cookie isolated to their specific subdomains to prevent any crossover between different user sites.

Number of THOUSANDS of distinct users this request is being made to serve:

As of writing, there are:

• 744,536 distinct users that have created Pens that use subdomains at codepen.dev
• 1,014,508 Pens that have at least one unique subdomain at codepen.dev
• 4,947 deployed Pens with a subdomain at codepen.app

This is not including viewers of a Pen. This is strictly users who have created something on CodePen.

These numbers are pulled from our database. I don't know how to give a publicly verifiable number, other than to point you to https://codepen.io where you can search and browse to see the users creating on the platform.

DNS Verification

➜ dig +short TXT _psl.codepen.app
"#3143"
➜ dig +short TXT _psl.codepen.dev
"#3143"

[pencilnav]

@shshaw

Please provide a more detailed technical explanation on how these domains are distributed and used, and include working examples that we can verify. Please also put this in the PR template.

Please provide current exact user counts on the submitted entries at a per entry basis. Users' is the number of distinct individuals working directly with a relationship with the requestor in using subnames of the requested space, and is not measured as the count of the audience of users that would visit to or interact with the namespace(s). Please provide the number in your reply and in the PR Template, with supporting materials for each entry in a manner that can be publicly verified.

[shshaw]

The following information has been added to the PR.

Technical Details

A Pen usually contains HTML, CSS and JavaScript and development previews are hosted at codepen.dev. The preview has a subdomain that's unique to Pen and, for editors of a Pen, unique to the user. These subdomains are generated automatically based on the Pen and the session user.
E.g. https://45137255e42e464b6b3bf13cde2f6eaa.codepen.dev/ - Unique subdomain for viewers of a Pen
E.g. https://es-d-14215068720260809-45137255e42e464b6b3bf13cde2f6eaa.codepen.dev/ - Unique subdomain for a specific User editing a Pen

Pens can be deployed to codepen.app subdomains for proper website hosting/full-screen previews. They're provided a unique subdomain of three random words separated by dashes. These subdomains are generated automatically when a user chooses to Deploy a Pen.
E.g. https://open-cherry-piglet.codepen.app/

Number of THOUSANDS of distinct users this request is being made to serve:

As of writing, there are:

• 744,536 distinct users that have created Pens that use subdomains at codepen.dev
• 1,014,508 Pens that have at least one unique subdomain at codepen.dev
• 4,947 deployed Pens with a subdomain at codepen.app

This is not including viewers of a Pen. This is strictly users who have created something on CodePen.

These numbers are pulled from our database. I don't know how to give a publicly verifiable number, other than to point you to https://codepen.io where you can search and browse to see the users creating on the platform.