Re: Unretrievable CPS documents listed in CCADB

2019-05-04 Thread Matt Palmer via dev-security-policy
On Sat, May 04, 2019 at 11:11:43AM +, Man Ho via dev-security-policy wrote:
> I could be wrong, but some browsers (IE/Chrome) seems to cache 
> downloaded PDF file and display the cache file if the filename is the 
> same. If it's true, end user may be actually reading an outdated PDF file.

If a browser is caching content retrieved from the target of a 307 Temporary
Redirect under the initial URI which issued the redirect, I'm *pretty* sure
that's a bug, and should be reported as such.

- Matt

___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy


Re: Unretrievable CPS documents listed in CCADB

2019-05-04 Thread Man Ho via dev-security-policy
I could be wrong, but some browsers (IE/Chrome) seems to cache 
downloaded PDF file and display the cache file if the filename is the 
same. If it's true, end user may be actually reading an outdated PDF file.

- Man Ho

On 04-May-19 3:18 AM, Wayne Thayer via dev-security-policy wrote:
> A relatively simple solution to this problem is to create a "permanent
> link" to the current version of these docs (e.g.
> https://digicert.com/repository/current_cp.pdf), then modify or redirect
> the document that the link returns each time the document is updated as
> part of the publishing process. Under this scheme, the CA should never need
> to worry about updating CCADB.
___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy