Comment Comment by krishnasrinivas If the client sends incorrect Authorization you will still serve from the cache. This is insecure. parent krishnasrinivas 9 years ago