LWN.net Logo

Gathering session cookies with Firesheep

Gathering session cookies with Firesheep

Posted Nov 4, 2010 10:13 UTC (Thu) by osma (subscriber, #6912)
In reply to: Gathering session cookies with Firesheep by ekj
Parent article: Gathering session cookies with Firesheep

So true.

One more thing: HTTPS makes front-end caching (aka HTTP acceleration) more difficult. You can't (or at least shouldn't) run a medium-to-high traffic site with dynamic content without a proper front-end cache.

For example, Varnish doesn't support HTTPS connections so you need to put something like Pound or Stunnel in front of it. OK so that's perhaps just a problem with Varnish (apparently Squid can do HTTPS reverse proxying), but still, that's making things more difficult for the webmaster/sysadmin in the current state of affairs.


(Log in to post comments)

Gathering session cookies with Firesheep

Posted Nov 4, 2010 12:05 UTC (Thu) by Klavs (subscriber, #10563) [Link]

That would probably just be a matter of sponsoring the work for Varnish :)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds