On Fri, 7 Aug 2026, Александр via curl-library wrote:
Maybe it's good idea to allow user to specify psl check strategy at
runtime? Like disable datasets from filesystem and use psl's
builtin/embedded one? And even to disable psl at all without rebuild?
To me that seems like a subtle way to weaken your cookies in a way that users
will have a hard time to understand and it will be hard to notice when or if
it happens down the line.
Would it perhaps be better to work on making the load/refresh happen at a
different moment in time than exactly when parsing the cookie?
Since the refresh timeout is 72 hours and few applications actually live that
long, it seems to mostly be a problem with the first load. Is that perhaps so?
--
/ daniel.haxx.se || https://rock-solid.curl.dev
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette: https://curl.se/mail/etiquette.html
