News for hackers. Stuff that matters.
Re:How a banner ad for H&R Block appeared on Apple.com witho... by jbooth on Monday April 08, 2013 @01:59PM (#5513348)
Does that work? Each client has its own key, so your caching goes from "one cached copy for everyone" to "one cached copy per client", right? Or am I missing something there?
Re:How a banner ad for H&R Block appeared on Apple.com witho... by cortesoft on Monday April 08, 2013 @02:28PM (#5513544)
No, you could still have one cached copy for everyone. The SSL termination happens before the user's request gets to the caching server. As far as the cache is concerned, it is a regular http request. The only problem is you cannot have generic caches that live closer to the end user; the cache has to be controlled by the person controlling the SSL termination.
Re:How a banner ad for H&R Block appeared on Apple.com witho... by jbooth on Monday April 08, 2013 @03:24PM (#5513897)
So you're talking about caching the cleartext and then encrypting it for each client, which is totally doable.

I (possibly mis-) understood the original comment to be claiming that you could cache the ciphertext, to which I just wanted to make sure I wasn't missing some huge piece of understanding.