curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder Daniel himself.

Re: Feature to dynamically disable PSL dataset from filesystem

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Sun, 9 Aug 2026 17:56:34 +0200 (CEST)

On Fri, 7 Aug 2026, Александр via curl-library wrote:

> Maybe it's good idea to allow user to specify psl check strategy at
> runtime? Like disable datasets from filesystem and use psl's
> builtin/embedded one? And even to disable psl at all without rebuild?

To me that seems like a subtle way to weaken your cookies in a way that users
will have a hard time to understand and it will be hard to notice when or if
it happens down the line.

Would it perhaps be better to work on making the load/refresh happen at a
different moment in time than exactly when parsing the cookie?

Since the refresh timeout is 72 hours and few applications actually live that
long, it seems to mostly be a problem with the first load. Is that perhaps so?

-- 
  / daniel.haxx.se || https://rock-solid.curl.dev


-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
Received on 2026-08-09