Changeset 512 for draft-ietf-httpbis

Timestamp:

Mar 4, 2009, 9:30:02 PM (11 years ago)

Author:

mnot@…

Message:

clarify that authenticated requests can't have their responses stored.

File:

• draft-ietf-httpbis/latest-roy/p6-cache.xml (modified) (3 diffs)

draft-ietf-httpbis/latest-roy/p6-cache.xml

@@ -395 +395 @@
             <t>the "private" cache response directive (see <xref target="header.cache-control" />
             does not appear in the response, if the cache is a shared cache, and</t>
+            <t>the request does not have an Authorization header (see &header-authorization), if
+            unless either the cache is non-shared, or the "public" directive is present  (see <xref
+                target="header.cache-control" />).</t>            
             <t>the cache understands partial responses, if the response is partial or incomplete
               (see <xref target="errors.or.incomplete.response.cache.behavior" />).</t>
@@ -421 +424 @@
       <section anchor="constructing.responses.from.caches"
         title="Constructing Responses from Caches">
-        <t>For a presented request, a non-shared cache &MAY; return a stored response, provided
+        <t>For a presented request, a cache &MAY; return a stored response, provided
           that: <list style="symbols">
             <t>The presented Request-URI and that of the stored response match (see
@@ -438 +441 @@
               its use (see <xref target="header.cache-control" /> and <xref target="header.pragma"
              />).</t>
-          </list>
-        </t>
-        <t>A shared cache &MAY; return a stored response, provided that: <list style="symbols">
-            <t>The criteria for non-shared caches above are met (taking into account directives specific to shared
-              caches; see <xref target="header.cache-control" />), and</t>
-            <t>the stored response was not associated with an authenticated request (see
-              &header-authorization;), unless explicitly allowed (see <xref
-                target="header.cache-control" />).</t>
           </list>
         </t>