5 ms·

They were recently moved to the SiteSecurityServiceState.txt file: https://bugzilla.mozilla.org/show_bug.cgi?id=775370 https://bugzilla.mozilla.org/show_bug.cgi

• agwa 12y ago
  Good grief. They've replaced a SQLite database with a text file that's loaded into an in-memory hash table because "adoption of HSTS is not very widespread yet" so "using any kind of off-the-shelf database to store this would be inefficient and overly complex." This required a patch that took over a year to review, during which time issues were raised with the text file parser they had to write from scratch. Loading the whole table into memory has clear DoS implications, so they're limiting the table to 1024 entries (making the use of a hash table rather silly), with an eviction strategy[1] that is going to favor older entries and effectively prevent newer entries from being added. [1] https://hg.mozilla.org/releases/mozilla-aurora/rev/b339d53f95f2#l1.421 https://hg.mozilla.org/releases/mozilla-aurora/rev/b339d53f9...