3 ms·

I had a longer reply to this but lost it. There's some significant security concerns with this (I start claiming to cache the pornhub css file), it's not at al

I had a longer reply to this but lost it. There's some significant security concerns with this (I start claiming to cache the pornhub css file), it's not at all clear how it works when you have other caches (if Bing refers me, how do I decide to use bings cached version of my asset vs Google's). I guess you might mean that google can cache something as my site, but I'm pretty sure that would also allow me to maliciously overwrite Google's js in your cache. And it still has the latency issues: to connect to your site I now have to establish an initial https connection and load the main html page. That's significantly more than 0 latency.

Wowfunhappy 8y ago
Shouldn't storing and checking a hash solve most of the security problems? That way, you know the asset hasn't changed at all. It doesn't matter if there's multiple caches because unless you've managed to break sha256, they should all be the same file. The actual html can also be cached, which should make it zero latency. However, I am realizing now that I'm not sure where the checksum gets stored... (I'll readily admit this was a spur-of-the-moment idea that I haven't actually thought through intensively.)