Hacker News new | ask | show | jobs
by dexwiz 2016 days ago
Another user mentioned SSO redirects for main pages. For assets generally there is a different domain for the CDN, which may load JavaScript. Finally there is an inbuilt limit of simultaneous requests per domain in browsers. Different domains are used to get around this.
1 comments

I did not know this about connection limits.

The multi-domain assets really bug me when I'm enabling domains one by one in NoScript.

Here is an example of domains used on Amazon's website:

  amazon.com
  www.amazon.com
  amazon-adsystem.com
  associates-amazon.com
  media-amazon.com
  ssl-images-amazon.com
On its own "associates-amazon.com" sounds sketchy, but I suppose you assume the HTTPS page that you loaded from amazon.com knows what its doing.
The HTTP 1.1 RFC says 2 per domain, but it’s more like 6 for most browsers.

https://docs.pushtechnology.com/cloud/latest/manual/html/des...