|
|
|
|
|
|
by Spivak
2111 days ago
|
|
|
I mean you’re the one who gets to decide how long the signature is valid for just like you can choose your TTL in DNS. And a malicious cache can’t continue to serve stale content because browsers will reject it. You get a hard guarantee that your TTL will be respected. |
|
|