Cache me if you can

A cache key that forgot the Host header made the response reusable in the wrong place.

Overview

This challenge was a reminder that caches have their own idea of identity.

I compared requests through the proxy and saw that a response generated for one host could be replayed for another.

Takeaways

Keep cache keys aligned with every input that changes the response.