Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 07-Jul-2024 22:14:40 JST Ryan Castellucci :nonbinary_flag:

PSA: There's no longer any benefit in terms of caching to using public CDNs. Caches are partitioned based on ancestor origins now for privacy.

In conversation about a year ago from infosec.exchange permalink
- Embed this notice
  ciara (doti@pl.catboyindustries.co)'s status on Monday, 08-Jul-2024 01:49:15 JST ciara
  in reply to
  
  @ryanc wdym ancestor origin?
  
  In conversation about a year ago permalink
- Embed this notice
  SpaceLifeForm (spacelifeform@infosec.exchange)'s status on Monday, 08-Jul-2024 03:56:42 JST SpaceLifeForm
  in reply to
  
  @ryanc
  Got a link?
  A CDN is still a MITM.
  
  In conversation about a year ago permalink
- Embed this notice
  Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 08-Jul-2024 06:34:39 JST Ryan Castellucci :nonbinary_flag:
  in reply to
  - SpaceLifeForm
  @SpaceLifeForm If you look up "cache partitioning" you'll find more details.
  Subresource integrity can prevent a lot of naughty CDN behaviour.
  
  In conversation about a year ago permalink

Feeds