psl-problems

Ryan Sleevi suggests (perhaps that's putting it too mildly) that further reliance on the PSL is a bad idea: https://github.com/sleevi/psl-problems and https://news.ycombinator.com/item?id=24441942 His recommendation is to as much as possible use the Same Origin Policy or if you must, a slightly weakened variant like ignoring port numbers. I suspect I'll make another comment elsewhere in this discussion that says more about the problems with that.

PSL maintainer here: please don’t use the PSL! Yes, it’s weird to have a maintainer asking people not to use their project, but the PSL was a very specific (and unfortunate) hack for a very specific (and unfortunate, and browser-created) problem. It is something we live with, not something we like. While the ideal world is “don’t use any list at all, use the protocols as God, the IETF, and IANA intended”, if you are going to use a list, using the IANA list, updated daily, is much better than the PSL. Do not use the PSL for anything that is not “cookies abusing the Host header” https://github.com/sleevi/psl-problems