Johannes Ernst wrote:
Let me ask the other way around. Why wouldn't the
following, much
simplified scenario work:
- there is only one cookie, xxx_session that is ever set by MediaWiki
- it is set as a result of a successful authentication
- is removed as a result of a log out.
- caching / re-rendering is performed strictly based on the cookie
value and the modification times of the page
The browser doesn't tell us its previous cookie, just the timestamp.
There should be a Vary: on cookie, but I'm not sure this makes a
difference to the end-browser's behavior (it's targetted at intermediate
caches). Could you test this and report back?
-- brion vibber (brion @
pobox.com)