undefined | Better HN

0 pointsbaroffoos7y ago0 comments

I really hate websites that do this because I have to go and whitelist the hundreds of domains that important resources are coming from.

0 comments

judge20207y ago

I would say it's both a blessing and a curse. Yes, it makes it harder for first party isolation scripts to sandbox a service, but the separation of domain based on the service (doubleclick for ads, googlevideo.com for video, etc) makes it easier for ad/content blocker list maintainers to block only the domains and services it should be blocking.

quaker55677y ago

All IPs used by Google have PTR records to the 1e100.net zone so it is straightforward to determine whether any given domain is a Google domain.

e.g. googlevideo.com resolves to 172.217.4.196 and the PTR for that IP is lga15s48-in-f196.1e100.net

They even have a faq for this: https://support.google.com/faqs/answer/174717?hl=en

freeopinion7y ago

So when a site relies on resources from ytimg.com, are those ads or videos? What about ggpht.com, gstatic.com, branch.io, unpkg.com, or any of the hundreds of CDNs?

Most sites I visit these days--even super common sites like medium.com--have dozens (or even the hundreds alluded to above) of dependencies from seemingly unrelated sites. I have no idea if those are CDNs for common js libs, analytics libs, spammer libs, tracking libs, or what. I recognize things like CDN links for jQuery, Bootstrap, React, etc. I see many that seem to be Facebook tracking.

Of course, blocking many of these breaks the page. I have started to avoid sites that break without access to urls I can't identify. But this is both laborious to vet, and isolating.

There is no longer such a thing as easy, anonymous, inclusive web browsing.

pferde7y ago

Yes, but they are supposed to be using subdomains for that (e.g. usercontent.google.com, video.google.com, apis.google.com, ...), instead of what is essentially DNS spam (guesswhetherthisdomainalsobelongstogoogle.com).

DNS has been made hierarchic for this reason.

baroffoosOP7y ago

I was told this may have been because older browsers limited the number of simultaneous connections to a domain name and you could work around it by having multiple domain names.

j / k navigate · click thread line to collapse