Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 916 invoked from network); 7 Nov 2005 23:42:11 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 7 Nov 2005 23:42:11 -0000 Received: (qmail 6147 invoked by uid 500); 7 Nov 2005 23:41:58 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 6121 invoked by uid 500); 7 Nov 2005 23:41:58 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 6110 invoked by uid 99); 7 Nov 2005 23:41:58 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 07 Nov 2005 15:41:58 -0800 X-ASF-Spam-Status: No, hits=1.8 required=10.0 tests=RCVD_IN_WHOIS_BOGONS X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [196.31.24.162] (HELO gatekeeper.fma.co.za) (196.31.24.162) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 07 Nov 2005 15:41:52 -0800 Received: from localhost (localhost.localdomain [127.0.0.1]) by gatekeeper.fma.co.za (Postfix) with ESMTP id 08D43B5FB3 for ; Tue, 8 Nov 2005 01:41:30 +0200 (SAST) Received: from gatekeeper.fma.co.za ([127.0.0.1]) by localhost (gatekeeper.fma.co.za [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 29327-01 for ; Tue, 8 Nov 2005 01:41:27 +0200 (SAST) Received: from [196.30.143.210] (gatekeeper.fma.co.za [196.30.143.210]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by gatekeeper.fma.co.za (Postfix) with ESMTP id 7C31AB4E74 for ; Tue, 8 Nov 2005 01:41:27 +0200 (SAST) Message-ID: <436FE624.8090903@sharp.fm> Date: Tue, 08 Nov 2005 01:41:24 +0200 From: Graham Leggett User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050921 Red Hat/1.7.12-1.4.1 X-Accept-Language: en-za, en-us, en MIME-Version: 1.0 To: dev@httpd.apache.org Subject: Re: cache trouble (Re: [vote] 2.1.9 as beta) References: <4364478A.2090607@force-elite.com> <436EC955.7060004@force-elite.com> <200511071006.42452.nick@webthing.com> <133f362620b17aa04536c934daedee15@gbiv.com> <436FB706.9080504@apache.org> <436FBDAB.4030208@sharp.fm> <436FC432.5090301@apache.org> <436FD081.9010409@apache.org> <610afb118b002b7af096dd6ffef2bcf1@gbiv.com> <436FDD24.1020309@apache.org> In-Reply-To: <436FDD24.1020309@apache.org> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms010102010308010308050501" X-Virus-Scanned: by amavisd-new at fma.co.za X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N This is a cryptographically signed message in MIME format. --------------ms010102010308010308050501 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Ruediger Pluem wrote: > If I have a forward proxy to which I limit access via IP based access control > I should add Cache-Control: private to any response I get back from the backend > (either a Remote Proxy or the origin server). A very important distinction: forward and reverse proxy authentication works completely differently from each other. In a forward proxy configuration, you authenticate access to the proxy using Proxy-Authenticate. Once authenticated you can view cached content. In a reverse proxy (or any normal content) configuration, you authenticate access to content using WWW-Authenticate, and here the Cache-Control: private must be used to make sure that content generated for you is not inadvertently delivered to someone else. Cache-Control: private is not necessary in the forward proxy config. It is necessary in the reverse proxy / normal config case. Regards, Graham -- --------------ms010102010308010308050501 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJGzCC AugwggJRoAMCAQICAw+EzzANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNv bmFsIEZyZWVtYWlsIElzc3VpbmcgQ0EwHhcNMDUwOTIxMDkzODE2WhcNMDYwOTIxMDkzODE2 WjBdMRAwDgYDVQQEEwdMZWdnZXR0MQ8wDQYDVQQqEwZHcmFoYW0xFzAVBgNVBAMTDkdyYWhh bSBMZWdnZXR0MR8wHQYJKoZIhvcNAQkBFhBtaW5mcmluQHNoYXJwLmZtMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDGvVYuOXeBGu0PSArbW5SSSzztjMg1DPP90vksG/Y8Y gLf9MZ+NWKMf8BvWa30HOJJU9slrqbgEcIJPNpdtuJ3bG7+SIhPpibaw1pYhPWr06kbSaRH2 W0FBLZC5/pwseUnqbfLSqkfjd3NBe4k/3qaRr534gnmrwOdlUzwYHPZfXfLslvJM+14EFSDN s/AEphlW5704v+Ucb0Xe5IkJQzyy8DhU19BBqjqGdhykVv5wgJLiK/85BdYi/dfLwQOzzsbd 1HB/CJcSphBfmc24YPM+Sj5w8cX1gUnbTKhvHvQM4hs8gazsqb0A1lVnVLLeL0dlWnAEu/dt YDoeeDU8HwIDAQABoy0wKzAbBgNVHREEFDASgRBtaW5mcmluQHNoYXJwLmZtMAwGA1UdEwEB /wQCMAAwDQYJKoZIhvcNAQEEBQADgYEAlVOZib28O/HqUOp/ZMAxsJ5Ecm2EJI9v26hoITkx t+YrnwH11d59iNMiTvvGpPiZEtJiNdxqyNol/Jh25SZSilY9iGfCdOB3A5aLvQOCOWVhsiut Ly0gI4+4fOY5YNjCDK9K8by9vVTjhEHfnRaUlsLaUfE1xE2Ed9GIUsj72h8wggLoMIICUaAD AgECAgMPhM8wDQYJKoZIhvcNAQEEBQAwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0 ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBMB4XDTA1MDkyMTA5MzgxNloXDTA2MDkyMTA5MzgxNlowXTEQMA4G A1UEBBMHTGVnZ2V0dDEPMA0GA1UEKhMGR3JhaGFtMRcwFQYDVQQDEw5HcmFoYW0gTGVnZ2V0 dDEfMB0GCSqGSIb3DQEJARYQbWluZnJpbkBzaGFycC5mbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMQxr1WLjl3gRrtD0gK21uUkks87YzINQzz/dL5LBv2PGIC3/TGfjVij H/Ab1mt9BziSVPbJa6m4BHCCTzaXbbid2xu/kiIT6Ym2sNaWIT1q9OpG0mkR9ltBQS2Quf6c LHlJ6m3y0qpH43dzQXuJP96mka+d+IJ5q8DnZVM8GBz2X13y7JbyTPteBBUgzbPwBKYZVue9 OL/lHG9F3uSJCUM8svA4VNfQQao6hnYcpFb+cICS4iv/OQXWIv3Xy8EDs87G3dRwfwiXEqYQ X5nNuGDzPko+cPHF9YFJ20yobx70DOIbPIGs7Km9ANZVZ1Sy3i9HZVpwBLv3bWA6Hng1PB8C AwEAAaMtMCswGwYDVR0RBBQwEoEQbWluZnJpbkBzaGFycC5mbTAMBgNVHRMBAf8EAjAAMA0G CSqGSIb3DQEBBAUAA4GBAJVTmYm9vDvx6lDqf2TAMbCeRHJthCSPb9uoaCE5MbfmK58B9dXe fYjTIk77xqT4mRLSYjXcasjaJfyYduUmUopWPYhnwnTgdwOWi70DgjllYbIrrS8tICOPuHzm OWDYwgyvSvG8vb1U44RB350WlJbC2lHxNcRNhHfRiFLI+9ofMIIDPzCCAqigAwIBAgIBDTAN BgkqhkiG9w0BAQUFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTES MBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UE CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBl cnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0 aGF3dGUuY29tMB4XDTAzMDcxNzAwMDAwMFoXDTEzMDcxNjIzNTk1OVowYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1Ro YXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDEpjxVc1X7TrnKmVoeaMB1BHCd3+n/ox7svc31W/Iadr1/DDph8r9RzgHU5VAK MNcCY1osiRVwjt3J8CuFWqo/cVbLrzwLB+fxH5E2JCoTzyvV84J3PQO+K/67GD4Hv0CAAmTX p6a7n2XRxSpUhQ9IBH+nttE8YQRAHmQZcmC3+wIDAQABo4GUMIGRMBIGA1UdEwEB/wQIMAYB Af8CAQAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVBl cnNvbmFsRnJlZW1haWxDQS5jcmwwCwYDVR0PBAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYD VQQDExFQcml2YXRlTGFiZWwyLTEzODANBgkqhkiG9w0BAQUFAAOBgQBIjNFQg+oLLswNo2as Zw9/r6y+whehQ5aUnX9MIbj4Nh+qLZ82L8D0HFAgk3A8/a3hYWLD2ToZfoSxmRsAxRoLgnSe JVCUYsfbJ3FXJY3dqZw5jowgT2Vfldr394fWxghOrvbqNOUQGls1TXfjViF4gtwhGTXeJLHT HUb/XV9lTzGCAzswggM3AgEBMGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBD b25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp bCBJc3N1aW5nIENBAgMPhM8wCQYFKw4DAhoFAKCCAacwGAYJKoZIhvcNAQkDMQsGCSqGSIb3 DQEHATAcBgkqhkiG9w0BCQUxDxcNMDUxMTA3MjM0MTI0WjAjBgkqhkiG9w0BCQQxFgQU1Jul 6dzRr1HeT1Xgee9/FLZh35swUgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG 9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgweAYJKwYB BAGCNxAEMWswaTBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcg KFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3Vpbmcg Q0ECAw+EzzB6BgsqhkiG9w0BCRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRo YXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBG cmVlbWFpbCBJc3N1aW5nIENBAgMPhM8wDQYJKoZIhvcNAQEBBQAEggEAf7qWEgZHxbWPTkxF 9vZhM8wZshlLf98IFB0m6RMeHMiX+kyB9RZYI/JjFYgIdI9f1XlfHYwAX+Tg20D7CtZKHIiW AMIGh4+e3bc/gx065lOWcIV2C9+a3ZZHHL6aC6Sesw7Uv5aNQTW39KciXOlpMN3RlCUqLYpM 7MhOT19avAsSfhrCYvdp//yB9cFIGbB3AXgNrE7toIRxGQjCppgAOcaomHAukVe8U70+AeA8 QqJ0NE3uyZF2NI4f71NDWOFvWn4w1ARMUQnHbfbirvhrvVZwyiXlyHrAiV+RU39ce8KPOAbO cUOACsXglNTHY+oJxvW0vvlTz4tPshEVi6oEcAAAAAAAAA== --------------ms010102010308010308050501--