Can a proxy server cache SSL GETs? If not, would response body encryption suffice?
Posted
by Damian Hickey
on Stack Overflow
See other posts from Stack Overflow
or by Damian Hickey
Published on 2008-08-18T14:06:13Z
Indexed on
2010/05/18
21:30 UTC
Read the original article
Hit count: 229
Can a (||any) proxy server cache content that is requested by a client over https? As the proxy server can't see the querystring, or the http headers, I reckon they can't.
I'm considering a desktop application, run by a number of people behind their companies proxy. This application may access services across the internet and I'd like to take advantage of the in-built internet caching infrastructure for 'reads'. If the caching proxy servers can't cache SSL delivered content, would simply encrypting the content of a response be a viable option?
I am considering all GET requests that we wish to be cachable be requested over http with the body encrypted using asymmetric encryption, where each client has the decryption key. Anytime we wish to perform a GET that is not cachable, or a POST operation, it will be performed over SSL.
© Stack Overflow or respective owner