Re:Turns out half the internet has a single-point-of-failure...
by duskwuff on Monday July 20, 2020 @04:51PM
(#23901773)
> My understanding of TLS is that it's exceptionally difficult to cache content if you cannot see into the requests.
Not even "exceptionally difficult", but flat-out impossible. From the perspective of an observer, TLS sessions are random data. The protocol is specifically designed to defeat attempts to replay data -- a CDN is indistinguishable from an attacker in that sense.
Not even "exceptionally difficult", but flat-out impossible. From the perspective of an observer, TLS sessions are random data. The protocol is specifically designed to defeat attempts to replay data -- a CDN is indistinguishable from an attacker in that sense.