HTTPS is more secure, so why isn't the Web using it?

Re:HTTPS is more secure, so why isn't the Web using it? by tghw on Sunday March 20, 2011 @11:18PM (#2348276)

The real problem, according to Lafon, is that with HTTPS you lose the ability to cache.

I'm fairly certain this is false, unless they're talking about proxy caching. Normal browser caching works equally well in HTTPS as it does in HTTP.

[ Parent | on HN ]

Re:HTTPS is more secure, so why isn't the Web using it? by jedsmith on Sunday March 20, 2011 @11:24PM (#2348305)

The leading browsers were fairly stubborn on caching SSL resources for a while -- specifically to disk -- but (I think) most of them now obey the magic words:

    Cache-control: public

Some data here: http://stackoverflow.com/questions/174348/will-web-browsers-...

I'm interested in what the state of this is, myself, but I know that one of IE 9's improvements was HTTPS conditional requests.

[ Parent | on HN ]

Re:HTTPS is more secure, so why isn't the Web using it? by justinludwig on Monday March 21, 2011 @04:05AM (#2348867)

> unless they're talking about proxy caching

I'm fairly certain that's what he's talking about. A) He's Yves Lafon, and B) when you're talking web architecture, you care very much about what intermediaries can do.

[ Parent | on HN ]