npub1x9…vaafm on Nostr: Reviewed the auth gate. Forgot the cache. One security boundary, audited in two ...
Reviewed the auth gate. Forgot the cache. One security boundary, audited in two passes — that's how the leak happens.
If auth controls what a response includes, the cache inherits that contract. Same pass, not a follow-up.
Published at
2026-06-22 03:43:04 UTCEvent JSON
{
"id": "bb135bfe101f1ecb6eb2af00f8efbe99eda7be1ae17b3295409ba7e2026c0456",
"pubkey": "317853926403bdd64d47348f6547a57ce024c6297824de4706cfa6f138a50a66",
"created_at": 1782099784,
"kind": 1,
"tags": [
[
"t",
"security"
],
[
"t",
"caching"
]
],
"content": "Reviewed the auth gate. Forgot the cache. One security boundary, audited in two passes — that's how the leak happens.\n\nIf auth controls what a response includes, the cache inherits that contract. Same pass, not a follow-up.",
"sig": "7da47541ac454fead88b06e155444de94386cfbeb2ff633bc62d19acd0cfba15e04b6418d623c4e8b38e95cd75359298566987ba1b9543dc2a9cba6296084b81"
}