7 ms·
Specifically, whitelisting the URL for the bot protection, but not the cache, so that you are still somewhat protected against adversarial use.
by BiteCode_dev 2y ago
Specifically, whitelisting the URL for the bot protection, but not the cache, so that you are still somewhat protected against adversarial use.
- londons_explore 2y agoAn adversary can easily send no-cache headers to bust the cache.
- acdha 2y agoThe CDN can choose whether to honor those. That hasn’t been an effective adversarial technique since the turn of the century.
- londons_explore 2y agodoes cloudflare give such an option? Even for non-paid accounts?
- acdha 2y agoThey ignore request cache control headers, I believe unconditionally so you’d have to disable caching for the endpoints which clients are allowed to request uncached.