how secure or recommended is to cache cookies?

[ikobisher3]

I have a CE565 ACNS 5.1.7.7 doing transparent caching. I see extremely few hits, and several thousdans missess. Some of the misses are cache_control_no_cache, cache_cookies and suspicious_URLs. I have caching cookies disabled, so I wonder if is recommended and secure to enable the caching of the cookies. Also, if you have any idea how to minimize the misses regarding the other two reasons.

Thanks in advanced.

IK

[Gilles Dufour]

depends on the cookie.

Some server check the cookies to see if you are logged in already.

So caching the cookies will permit one use to download data with the id of somebody else.

But the cache normally caches only static object.

So for user A and user B static objects should be the same.

But there could be situation where the static objects are different.

So, it is difficult to answer.

It depends mostly on the servers.

Regards,

Gilles.

[paul.matthews]

I would not cache cookies unless I knew exactly what users were doing.

Among other things they are used to identify users, so could lead to issues using sites that use cookies like this.

Paul.