Ah, right. I think just having getKeyForHost is okay, because usually we have an nsIURI and we can simply call getKeyForHost(aURI.host), right? (Or am I misunderstanding what you're asking?)