Yanick Witschi

> Nginx is our default webserver in mostly all our own Sulu projects since years, but Nginx was in our cases never used for Caching because Nginx caching in its...

I guess for HTML responses we could add random sized paddings but no idea how to mitigate for all contents. Any proposals? Also, I wonder how important this really is....

When I read this, they do exactly the same as my implementation does^^ I also find 0 information in the source code of Varnish regarding BREACH attacks. All I find...

ESI should be of no concern. The proxy will not send an `Accept-Encoding` header so it will get the uncompressed response.

Yes this PR (in its current state) would store the contents gzipped (if supported and not already gzipped). We decompress on the fly if the client does not support gzipping....

We should definitely discuss this at the developers meeting :)

> if you have a login module and an OAuth connect module on the same page (which is likely) then the login module will capture the last authentication error instead....

As discussed on today's call, this is one of many issues concerning icons. We're planning going back to an icon set. Once we have that, we can all discuss which...

It would have to be dumped literally. So the cache file should include the variable access, like it does now :)

```php 'attributes' => 'onclick="if(!confirm(\'\'))return false;Backend.getScrollOffset()"', ``` Or some placeholder or whatever.