3 ms·

I really hate websites that do this because I have to go and whitelist the hundreds of domains that important resources are coming from.

judge2020 8y ago
I would say it's both a blessing and a curse. Yes, it makes it harder for first party isolation scripts to sandbox a service, but the separation of domain based on the service (doubleclick for ads, googlevideo.com for video, etc) makes it easier for ad/content blocker list maintainers to block only the domains and services it should be blocking.
- quaker5567 8y ago
  All IPs used by Google have PTR records to the 1e100.net zone so it is straightforward to determine whether any given domain is a Google domain. e.g. googlevideo.com resolves to 172.217.4.196 and the PTR for that IP is lga15s48-in-f196.1e100.net They even have a faq for this: https://support.google.com/faqs/answer/174717?hl=en https://support.google.com/faqs/answer/174717?hl=en
- pferde 8y ago
  Yes, but they are supposed to be using subdomains for that (e.g. usercontent.google.com, video.google.com, apis.google.com, ...), instead of what is essentially DNS spam (guesswhetherthisdomainalsobelongstogoogle.com). DNS has been made hierarchic for this reason.
  - baroffoos 8y ago
    I was told this may have been because older browsers limited the number of simultaneous connections to a domain name and you could work around it by having multiple domain names.
- freeopinion 8y ago
  So when a site relies on resources from ytimg.com, are those ads or videos? What about ggpht.com, gstatic.com, branch.io, unpkg.com, or any of the hundreds of CDNs? Most sites I visit these days--even super common sites like medium.com--have dozens (or even the hundreds alluded to above) of dependencies from seemingly unrelated sites. I have no idea if those are CDNs for common js libs, analytics libs, spammer libs, tracking libs, or what. I recognize things like CDN links for jQuery, Bootstrap, React, etc. I see many that seem to be Facebook tracking. Of course, blocking many of these breaks the page. I have started to avoid sites that break without access to urls I can't identify. But this is both laborious to vet, and isolating. There is no longer such a thing as easy, anonymous, inclusive web browsing.

judge2020 8y ago

I would say it's both a blessing and a curse. Yes, it makes it harder for first party isolation scripts to sandbox a service, but the separation of domain based on the service (doubleclick for ads, googlevideo.com for video, etc) makes it easier for ad/content blocker list maintainers to block only the domains and services it should be blocking.

quaker5567 8y ago
All IPs used by Google have PTR records to the 1e100.net zone so it is straightforward to determine whether any given domain is a Google domain. e.g. googlevideo.com resolves to 172.217.4.196 and the PTR for that IP is lga15s48-in-f196.1e100.net They even have a faq for this: https://support.google.com/faqs/answer/174717?hl=en https://support.google.com/faqs/answer/174717?hl=en
pferde 8y ago
Yes, but they are supposed to be using subdomains for that (e.g. usercontent.google.com, video.google.com, apis.google.com, ...), instead of what is essentially DNS spam (guesswhetherthisdomainalsobelongstogoogle.com). DNS has been made hierarchic for this reason.
- baroffoos 8y ago
  I was told this may have been because older browsers limited the number of simultaneous connections to a domain name and you could work around it by having multiple domain names.
freeopinion 8y ago
So when a site relies on resources from ytimg.com, are those ads or videos? What about ggpht.com, gstatic.com, branch.io, unpkg.com, or any of the hundreds of CDNs? Most sites I visit these days--even super common sites like medium.com--have dozens (or even the hundreds alluded to above) of dependencies from seemingly unrelated sites. I have no idea if those are CDNs for common js libs, analytics libs, spammer libs, tracking libs, or what. I recognize things like CDN links for jQuery, Bootstrap, React, etc. I see many that seem to be Facebook tracking. Of course, blocking many of these breaks the page. I have started to avoid sites that break without access to urls I can't identify. But this is both laborious to vet, and isolating. There is no longer such a thing as easy, anonymous, inclusive web browsing.