On edge architecture
blog.cfelde.com
blog.cfelde.com
(Caveat: it's an appallingly vague spec, and Vary is frequently badly implemented, or not at all).
What are the security implications of a setup like this? How does data storage work, especially PII or business-sensitive data?