Thread

1. jrochkind1 · 1790210927 · focus · HN ↗

   I had not actually realized what a mess Vary is.

   Wow, sometimes I think it's amazing the web works at all!

   1. saltcured · 1790211418 · focus · HN ↗

      It pains me to think about the important ones like varying on session cookie and authorization headers, and how badly some middleware can confuse things.

      We generate custom content for a given authentication context. We definitely want caching at the user agent, but we want the cache keyed by the authenticated identity. Otherwise something like logging out and logging in as a different identity can produce monstrously confused results when an SPA or similar mixes some cached and some fresh responses into one page.

      1. sandeepkd · 1790221654 · focus · HN ↗

         Wait a second, if you decided to become intermediary in the protocol then you are supposed to add value, not take away the features that already exists.

         Although its not clear from the article itself, my gut feeling is that some big enough client arm twisted them to support it before they sign the contract again

         1. Joker_vD · 1790229862 · focus · HN ↗

            Implementing the HTTP/1.1 caching mechanism at the proxy server is delightfully simple if you just ignore it entirely. But if you decide to do some caching on your own, you better implement the semantics in the way the clients and the servers expect it to be. Which is not simple at all if you're doing the caching to eke some performance improvements.

Unofficial Hacker News client; not affiliated with Y Combinator.