Capriotti wrote:
Hmmmmmmmmm... cache de ssl ? Isso n�o deixa um tremendo buraco de seguran�a ? VC pode acabar deixando em cache senhas, n�meros de cart�o de cr�dito, etc, etc, etc...
  Claro que deixa ;-) srsrsrs

Pode dar uma a��o judicial LINDA !

PS.: Fala aqui a besta em forma de pessoa, completamente ignorante em termos de HTTP HTTPS, etc...
  Somos dois ent�o...
  Mais sabes que por default o apache faz cache de ssl!!!


#############################################################
# Note: The following directives are only required if session
# cacheing is enabled (the default from 1.17). To disable
# cacheing, make sure the following is set in apache_ssl.c
#
#define CACHE_SESSIONS          FALSE
##############################################################

E isso no httpd.conf

SSLCacheServerPath /www/bin/gcache
SSLCacheServerPort /www/cache/ssl.fictional.co.cache.socket
SSLSessionCacheTimeout 300


Atenciosamente Soulofblack

_______________________________________________________________________
Busca Yahoo!
O melhor lugar para encontrar tudo o que voc� procura na Internet
http://br.busca.yahoo.com/
_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/

Responder a