You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Axel-Stéphane SMORGRAV <Ax...@europe.adp.com> on 2005/07/28 14:09:07 UTC
[users@httpd] Apache 2.0: mod_cache: "Cache-Control: no-cache" not preventing content from being served from cache
As far as I have understood RFC2616 14.9.1 and 14.9.2, no-cache is supposed to prevent content from being served from cache without revalidation, and no-store forbids storing content altogether.
Tests I made with Apache 2.0.49 and 2.0.54 show that Apache gladly serves contents containing "Cache-Control: no-cache" in the response header, from cache without revalidation. On the other hand, if the response contains "Cache-Control: no-store", the response is not cached.
I submit that the CACHE_OUT filter should not be run if the cached headers contain "Cache-Control: no-cache".
Any thoughts?
-ascs
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Apache 2.0: mod_cache: "Cache-Control: no-cache" not preventing content from being served from cache
Posted by Joshua Slive <js...@gmail.com>.
On 7/28/05, Axel-Stéphane SMORGRAV
<Ax...@europe.adp.com> wrote:
> As far as I have understood RFC2616 14.9.1 and 14.9.2, no-cache is supposed to prevent content from being served from cache without revalidation, and no-store forbids storing content altogether.
>
> Tests I made with Apache 2.0.49 and 2.0.54 show that Apache gladly serves contents containing "Cache-Control: no-cache" in the response header, from cache without revalidation. On the other hand, if the response contains "Cache-Control: no-store", the response is not cached.
>
> I submit that the CACHE_OUT filter should not be run if the cached headers contain "Cache-Control: no-cache".
>
> Any thoughts?
Don't know about that specific issues, but you should try httpd 2.1
where mod_cache has been vastly improved.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org