Johannes Ernst wrote:
Let me ask the other way around. Why wouldn't the following, much simplified scenario work:
- there is only one cookie, xxx_session that is ever set by MediaWiki
- it is set as a result of a successful authentication
- is removed as a result of a log out.
- caching / re-rendering is performed strictly based on the cookie
value and the modification times of the page
The browser doesn't tell us its previous cookie, just the timestamp. There should be a Vary: on cookie, but I'm not sure this makes a difference to the end-browser's behavior (it's targetted at intermediate caches). Could you test this and report back?
-- brion vibber (brion @ pobox.com)