caching and https / pw authorized pages

[Dirk Mueller]

On Die, 17 Sep 2002, Waldo Bastian wrote:

> For SSL we only do not cache "text/*" objects but we do cache images. 

Ok, so it wasn't about security.. because the cached images could be a graph 
of my stocks ..

> do the same for sites that require authentication. If you think it helps, I 
> can also allow caching of css and javascript. I at least assume that those 
> will in general not contain very sensitive information.

Historically the mimetime of .css and .js files is always wrong. depending 
on the mimetype here isn't likely to work for all cases. 


-- 
Dirk (received 3 mails today)