[metrics-bugs] #26132 [Metrics/Onionoo]: Fix the Expires header on relay search

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat May 26 22:35:51 UTC 2018


#26132: Fix the Expires header on relay search
-----------------------------+------------------------------
 Reporter:  teor             |          Owner:  metrics-team
     Type:  defect           |         Status:  assigned
 Priority:  Medium           |      Milestone:
Component:  Metrics/Onionoo  |        Version:
 Severity:  Normal           |     Resolution:
 Keywords:                   |  Actual Points:
Parent ID:                   |         Points:
 Reviewer:                   |        Sponsor:
-----------------------------+------------------------------
Changes (by irl):

 * owner:  irl => metrics-team
 * status:  needs_information => assigned
 * component:  Metrics/Relay Search => Metrics/Onionoo


Comment:

 It looks like adding the `must-revalidate` header to Onionoo responses
 will fix this, assuming that mobile Safari honours it.

 > Servers SHOULD send the `must-revalidate` directive if and only if
 failure to revalidate a request on the entity could result in incorrect
 operation, such as a silently unexecuted financial transaction. Recipients
 MUST NOT take any automated action that violates this directive, and MUST
 NOT automatically provide an unvalidated copy of the entity if
 revalidation fails.

 This does seem like an extreme step to take though. Safari should really
 be honouring the `max-age=` directive unless it has bad connectivity.

 Reassigning to metrics-team as I won't have any more time to progress this
 week.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26132#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the metrics-bugs mailing list