Re: Feature to dynamically disable PSL dataset from filesystem
Daniel Stenberg via curl-library <[email protected]>
| Newsgroups | gmane.comp.web.curl.library |
|---|---|
| Message-ID | <[email protected]> |
On Fri, 7 Aug 2026, Александр via curl-library wrote: > Maybe it's good idea to allow user to specify psl check strategy at > runtime? Like disable datasets from filesystem and use psl's > builtin/embedded one? And even to disable psl at all without rebuild? To me that seems like a subtle way to weaken your cookies in a way that users will have a hard time to understand and it will be hard to notice when or if it happens down the line. Would it perhaps be better to work on making the load/refresh happen at a different moment in time than exactly when parsing the cookie? Since the refresh timeout is 72 hours and few applications actually live that long, it seems to mostly be a problem with the first load. Is that perhaps so? -- / daniel.haxx.se || https://rock-solid.curl.dev -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html