caching and https / pw authorized pages

[Dirk Mueller]

On Mit, 18 Sep 2002, Dirk Mueller wrote:

> > For SSL we only do not cache "text/*" objects but we do cache images. 
> Ok, so it wasn't about security.. because the cached images could be a graph 
> of my stocks ..
> 
> > do the same for sites that require authentication. If you think it helps, I 
> > can also allow caching of css and javascript. I at least assume that those 
> > will in general not contain very sensitive information.
> 
> Historically the mimetime of .css and .js files is always wrong. depending 
> on the mimetype here isn't likely to work for all cases. 

Any input on this ?


-- 
Dirk (received 41 mails today)