Skip to content

Comment on One-time Secret: Share passwords etc with URIs that work only onceparent

Comments

An interesting approach would be to delete the original data, but issue an ETag to leverage browser caching. If the original user rerequests the page while it's still in the browser's persistent cache, the server can simply return a 304 Not Modified, and the user still sees their data. Anyone else, though, is SOL.

Anyone else, except for people behind the same caching web proxy...

Presumably the entire thing is served over HTTPS, making this a non-issue.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.