Changeset 834 for draft-ietf-httpbis/latest/p6-cache.xml

Timestamp:

02/07/10 00:03:26 (12 years ago)

Author:

mnot@…

Message:

Clarify caching of authenticated responses by shared caches (see #174)

File:

• draft-ietf-httpbis/latest/p6-cache.xml (modified) (3 diffs)

draft-ietf-httpbis/latest/p6-cache.xml

@@ -429 +429 @@
        does not appear in the response, if the cache is shared, and</t>
     <t>the "Authorization" header (see &header-authorization;) does not appear in the request, if
-       the cache is shared (unless the "public" directive is present; see <xref
-       target="header.cache-control" />), and</t>
+       the cache is shared, unless the response explicitly allows it (see <xref
+       target="caching.authenticated.responses" />), and</t>
     <t>the response either:
       <list style="symbols">
@@ -836 +836 @@
   <cref anchor="TODO-spec-success-invalidate">specify that only successful (2xx, 3xx?) responses invalidate.</cref>
 </t>
+</section>
+
+<section anchor="caching.authenticated.responses" title="Shared Caching of Authenticated Responses">
+
+<t>Shared caches &MUST-NOT; use a cached response to a request with an Authorization header (&header-authorization;) to satisfy any subsequent request unless a cache directive that allows such responses to be stored is present in the response.</t>
+
+<t>In this specification, the following Cache-Control response directives (<xref target="cache-response-directive"/>) have such an effect: must-revalidate, public, s-maxage.</t>
+
+<t>Note that cached responses that contain the "must-revalidate" and/or "s-maxage" response directives are not allowed to be served stale (<xref target="serving.stale.responses"/>) by shared caches. In particular, a response with either "max-age=0, must-revalidate" or "s-maxage=0" cannot be used to satisfy a subsequent request without revalidating it on the origin server.</t>
 </section>
 
@@ -2477 +2486 @@
       "Clarify differences between / requirements for request and response CC directives"
     </t>
+        <t>
+                <eref target="http://trac.tools.ietf.org/wg/httpbis/trac/ticket/174" />:
+                "Caching authenticated responses"
+        </t>
     <t>
       <eref target="http://tools.ietf.org/wg/httpbis/trac/ticket/208" />: