6 ms·
It is no different than, say, incorporating. If you fail to perform certain rituals each year, you can lose your legal status. The odds of this happening any ti
by __jal 9y ago
It is no different than, say, incorporating. If you fail to perform certain rituals each year, you can lose your legal status. The odds of this happening any time soon with Coke are slim, similarly with ownership of coke.com, but it could.
Nothing is 'immutable' if you look at it hard enough. The Bible's teachings have changed over time. On the right scale, the Earth is a temporary novelty and questions about proton decay become relevant.
Tl;dr: set your expiration dates appropriately and you won't have a problem.
- AgentME 9y agoThe issue is that an attacker could buy a domain, serve content from it with the cache-control: immutable response, and then later someone else buys the domain, puts their own content on it, but a lot of their users (who had accessed the domain when it was owned by the attacker) have a lot of the attacker's immutable content permanently cached. Even if the second owner follows the advice of setting expiration dates appropriately, nothing helps them.
- taeric 9y agoThat ignores attacks on dns and certificate authorities. I could readily see a fun novel about a nation state or isp using this trick to seed malicious code to a lot of public sites. Imagine setting it for index.html on any site with a source that merely bootstraps to the intended site. Along with the malicious code.
- mseebach 9y agoIn an attack where DNS and CAs are compromised, immutable caching is going to be be least of our problems, frankly.
- taeric 9y agoHasn't this happened? Several times? I'm not trying to say it is everyday. But it is easier than you think. Browsers are removing bad authorities. Which is good. There are a lot of them, though. Which is a larger attack surface than many folks acknowledge.