Re: [access-control] non-GET authorization

On Sat, 20 Oct 2007 00:28:52 +0200, Jonas Sicking <jonas@sicking.cc> wrote:
> One important thing to mention in the spec is that the cache must be  
> keyed on the referer-root value. So that you don't cache an  
> access-granted based on one site requesting, and use the cache when  
> another site is.

Hmm ok. I guess that's in line with what Ian mentioned earlier about not  
wanting to expose all sites you grant access too. In that case caching the  
reply in case of failure does indeed make less sense.


-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>