Re: Feature to dynamically disable PSL dataset from filesystem
Demi Marie Obenour via curl-library <[email protected]>
| Newsgroups | gmane.comp.web.curl.library |
|---|---|
| Message-ID | <[email protected]> |
On 8/9/26 11:56, Daniel Stenberg via curl-library wrote: > On Fri, 7 Aug 2026, Александр via curl-library wrote: > >> Maybe it's good idea to allow user to specify psl check strategy at >> runtime? Like disable datasets from filesystem and use psl's >> builtin/embedded one? And even to disable psl at all without rebuild? > > To me that seems like a subtle way to weaken your cookies in a way that users > will have a hard time to understand and it will be hard to notice when or if > it happens down the line. > > Would it perhaps be better to work on making the load/refresh happen at a > different moment in time than exactly when parsing the cookie? I think it would be best to allow the application to do the I/O, unless one wants to put io_uring and FreeBSD AIO into libpsl. -- Sincerely, Demi Marie Obenour (she/her/hers) -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html
OpenPGP_signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEopQtqVJW1aeuo9/sszaHOrMp8lMFAmqJLiEACgkQszaHOrMp 8lNBIg//cjaucyu3fr945GITxhnqQPOarVwa1mHcTtBR9uVA0xjw+rkD7b0u38fA hoT+bMsy3TiWFfz4d0G4bLSwaGRKdWXQtdLpzwcsYQbzpbcdeWyYUfsER0BEDznV cKdFT3GmPHiuOFfw3uYQvWDZnfJrp/hXHkCPwmUPJqCuUoSnJ08CaSMvvIOdO6Ol AjCTcslwRcuEzk1xwRsANxr/3bWE5FbMeKYPGvuos45DRFJgocU/qN9Lz53ar7Oo w9L4MljLuXkj/080sYvou7W0BcUBUnebNhrErgVNKx9Iw7R/hxmExahGEtwjHgOH 8eyAyz7pud+VXX/s7kT58P8JdoAS7zBhpsyCGVgSHMzrPM896O3tmmF3Ri7zEm9L +jCKG1AOhuETxhYdnxwdpGb95lCarpqZUt1err8fnNWqqm2J0ONLduML1YRxlj4d 2rlY1x1LSWsUFseL5jeyIA19Gi19qRuJTQWkTkjL2YpIv49uc3vBlMjJYrYRFpUX TCtUy5+Y/i5UtxZJDDtOykZxQXgjyzhE3+rNV7Pvke3O8U3jlUv09V4NM0oz2f9O htTqk4lSq+h1mfpWsxKsZwG5/zErlcToStX70dAdSrgisJA0JzoMspp/VfOzOfWq VyIuepEH0AY/Kj8GdjnHN7n7+pVCsEoYOUii+TSrsLB8fvcFrZg= =l+Zc -----END PGP SIGNATURE-----