[metrics-bugs] #26132 [Metrics/Onionoo]: Fix the Expires header on relay search
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sat May 26 22:35:51 UTC 2018
#26132: Fix the Expires header on relay search
-----------------------------+------------------------------
Reporter: teor | Owner: metrics-team
Type: defect | Status: assigned
Priority: Medium | Milestone:
Component: Metrics/Onionoo | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-----------------------------+------------------------------
Changes (by irl):
* owner: irl => metrics-team
* status: needs_information => assigned
* component: Metrics/Relay Search => Metrics/Onionoo
Comment:
It looks like adding the `must-revalidate` header to Onionoo responses
will fix this, assuming that mobile Safari honours it.
> Servers SHOULD send the `must-revalidate` directive if and only if
failure to revalidate a request on the entity could result in incorrect
operation, such as a silently unexecuted financial transaction. Recipients
MUST NOT take any automated action that violates this directive, and MUST
NOT automatically provide an unvalidated copy of the entity if
revalidation fails.
This does seem like an extreme step to take though. Safari should really
be honouring the `max-age=` directive unless it has bad connectivity.
Reassigning to metrics-team as I won't have any more time to progress this
week.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26132#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the metrics-bugs
mailing list