About HTTP 1.1 Cache

[Fabian Keil]

"http://www.pas-world.com" <dev001 at pas-world.com> wrote:

> What about If-Modified-Since header with time now? The website can know
> the las visit, time and the pages of browser with a database.

That's why Privoxy can randomize the time within ranges that
are unlikely to cause revalidation failures:
http://www.privoxy.org/user-manual/actions-file.html#HIDE-IF-MODIFIED-SINCE
http://www.privoxy.org/user-manual/actions-file.html#OVERWRITE-LAST-MODIFIED

Note however, that using If-Modified-Since as Cookie replacement
is a lot more work than simply embedding URLs with session info.

Therefore it's questionable if anyone is going to bother.
Especially since the latter can't be easily fooled without
purging the cache.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20070922/59c998f2/attachment.pgp>