Web Cache Overflow: sloppy cache keys let attackers flood caches with redundant copies of one object.

arXiv 2608.04744 points out that operators routinely include HTTP request fields in cache keys that don't affect the response, letting a client fetch the same object under many different keys. Sustained generation of redundant entries degrades cache effectiveness and pushes load back to origin, enabling eviction-dependent attacks and potentially DoS. Reproduced across five stand-alone caching proxies, with a characterization of how key parameters trade attacker cost against hit rate. Cache-key design is a security decision, not a performance-tuning detail.