3 ms·
No thanks. There are already too many DNS lookups and TCP connections a user-agent has to make in 2019: - OCSP if not stapled. - IPv4/IPv6 racing/Happy Eyebal
by regecks 7y ago
No thanks. There are already too many DNS lookups and TCP connections a user-agent has to make in 2019:
- OCSP if not stapled.
- IPv4/IPv6 racing/Happy Eyeballs.
- Encrypted SNI (DNS lookup).
- Certificate Transparency: some Chrome builds are now querying logs to confirm embedded SCTs (if I understood correctly).
and now:
- Related Domains by DNS (draft-brotman-rdbd-02), or whatever replaces the PSL.
RDBD would have to be in the critical path (in order to understand the cookie scope), it's just going to make things slow and complex.
Are we also gonna give the same treatment to the HSTS preload list?
- throwaway2048 7y agoDNS requests don't need to be serial, blocking load, its easy to issue a burst of them at once. Virtually every user agent is already doing this I don't see the downside of that. Not sure why you feel there is arbitrarily "too many", do you have a concrete objection?
- regecks 7y agoExtra queries are a gamble that you don't encounter latency on any of the important ones, right? For example, on mobile data when you're hitting packet loss. I'm not so fussed about extra queries when they do not delay the user. But if we send out a RDBD query that a resolver doesn't respond to in a speedy manner, what does the user-agent do if it needs to decide how to scope a cookie? You can't exactly soft-fail something like that ...