开发者

Can a static object be fully-cached for HTTPS? (encrypted)

If I have a static object 开发者_开发技巧(file), which being requested by clients via HTTPS - is it possible to cache the file after encryption took place? (for the purpose of saving the processing time of encrypting for each and every client upon request)

Note: I'm not asking how to do it, but rather if it's even possible.


No. The encryption keys generated by SSL/TLS will be different for each connection. One component of the key-derivation is a client-generated nonce, so the server has no way of pre-calculating the key.


By sending Cache-Control: public many browsers will cache content even if it is sent over SSL.

IE, and FF3+ should respect this.

EDIT: Sorry misread the question. You can also store content after encryption using some sort of proxy server.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜