Re: Feature to dynamically disable PSL dataset from filesystem

Demi Marie Obenour via curl-library <[email protected]>
Newsgroups gmane.comp.web.curl.library
Message-ID <[email protected]>
On 8/9/26 11:56, Daniel Stenberg via curl-library wrote:
> On Fri, 7 Aug 2026, Александр via curl-library wrote:
> 
>> Maybe it's good idea to allow user to specify psl check strategy at
>> runtime? Like disable datasets from filesystem and use psl's
>> builtin/embedded one? And even to disable psl at all without rebuild?
> 
> To me that seems like a subtle way to weaken your cookies in a way that users 
> will have a hard time to understand and it will be hard to notice when or if 
> it happens down the line.
> 
> Would it perhaps be better to work on making the load/refresh happen at a 
> different moment in time than exactly when parsing the cookie?

I think it would be best to allow the application to do the I/O, unless
one wants to put io_uring and FreeBSD AIO into libpsl.
-- 
Sincerely,
Demi Marie Obenour (she/her/hers)

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
OpenPGP_signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=l+Zc
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.