[metalruler]

Speaking of slowdowns - until recently, a gmail login quietly set cookies by redirecting through multiple subdomains during the "Loading" prompt. Most notable was that it passed through accounts.youtube.com to set a cookie.

It now seems to achieve this by using ocsp.thawte.com. Not sure how that works, I can't see any HTTP or HTTPS fetches from youtube during gmail login, yet it still manages to set a third party cookie. Can OCSP do this?