-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Karel, thank you for the response.

On 10/17/2014 03:12 AM, Karel Slany wrote:
> This feature is functional only in Firefox and only when you enable
> the validation of all HTTPS connection requests. This option is
> disabled by default, because it slows down the browser. In the
> synchronous mode the validation is performed (and the connection
> attempt may be interrupted) before the browser actually connects to
> the server.
> 
[snip]
> 
> In synchronous mode we are using the http-on-examine-response. We
> are using this hook because we need to examine the received
> certificates. The extension is able to receive the server
> certificates on its own. But the hook remains the same.

I looked up that hook on the Mozilla dev wiki; it says "Called after a
response has been received from the web server. Headers are available
on the channel."

That doesn't make sense to me in the context of your statement that
validation is performed before the browser connects to the server,
since the Mozilla wiki implies that the hook is only called after a
response is received from the server.  If the Mozilla wiki is correct,
then it sounds like cookies would be sent to the webserver even if the
connection is later interrupted by your hook.

Clearly I'm confused about something; can you clarify this?

Thanks,
- -Jeremy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUQVVEAAoJEFgMI9bDV/9qhccH/jS3w5pUtoVj4n/KTGY/l86J
S92nAekaVsoRK+dFYhjXw+2m6LVJmcItHOUEnOhHM7oh5IW1LOxLjGHucoG3Gs3X
GnRE1PITsyZQ4Klm0QtpRYlyxdnoOFDyhXySIhJN30cVyEWm2bQwJkZt8Nwfp55n
5u3ZJrWz5wzBXtxoi2S7jYqOKpAmWRzhk4H2rckIv6zQWF2n4PzD+KjmCgnOZJF4
k6DeUC5Zei5Mdo0TT3Cq1MOKd+JsQQlNV84t7cXuDOEHnDKNSdBzWCChClSTz/qF
BjjApCpAxQIJKEmWsp5h/jJ0/Vv99AwZUdL47TXteGbWtyAIyN05Z3603uqlvKs=
=M1ma
-----END PGP SIGNATURE-----
_______________________________________________
dnssec-validator-users mailing list
[email protected]
https://lists.nic.cz/cgi-bin/mailman/listinfo/dnssec-validator-users

Reply via email to