Changeset 1959 for draft-ietf-httpbis

Timestamp:

31/10/12 00:54:06 (10 years ago)

Author:

mnot@…

Message:

Add privacy concern to caching security considerations; as per secdir review.

File:

• draft-ietf-httpbis/latest/p6-cache.xml (modified) (1 diff)

draft-ietf-httpbis/latest/p6-cache.xml

@@ -2091 +2091 @@
 </t>
 <t>
+   Furthermore, the very use of a cache can bring about privacy concerns. For
+   example, if two users share a cache, and the first one browses to a site,
+   the second may be able to detect that the other has been to that site, 
+   because the resources from it load more quickly, thanks to the cache.
+</t>
+<t>
    Implementation flaws might allow attackers to insert content into a cache 
    ("cache poisoning"), leading to compromise of clients that trust that