Re: [whatwg/fetch] COEP:credentialless and the HTTP cache. (#1253)

[@morlovich]

Keying cache entries on credentials mode certainly makes sense to me, at least.  I believe we've historically depended on/assumed/hoped folks would use vary: cookies if they cared about credentials, but there isn't any way to cover auth, short of using no-store (no-cache is funky, and doesn't do anything about isolation here, since forward/backward navigations can use those resources, regardless of credentials).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1253#issuecomment-863446363