On 8/9/26 11:56, Daniel Stenberg via curl-library wrote: > On Fri, 7 Aug 2026, Александр via curl-library wrote: > >> Maybe it's good idea to allow user to specify psl check strategy at >> runtime? Like disable datasets from filesystem and use psl's >> builtin/embedded one? And even to disable psl at all without rebuild? > > To me that seems like a subtle way to weaken your cookies in a way that users > will have a hard time to understand and it will be hard to notice when or if > it happens down the line. > > Would it perhaps be better to work on making the load/refresh happen at a > different moment in time than exactly when parsing the cookie?
I think it would be best to allow the application to do the I/O, unless one wants to put io_uring and FreeBSD AIO into libpsl. -- Sincerely, Demi Marie Obenour (she/her/hers)
OpenPGP_signature.asc
Description: OpenPGP digital signature
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html
