I am building a PWA and I have got restrictions that cached data have to be secure in some way, so I was wondering where the Cache API stores the data.

Since this feature is only available in Secure Contexts (HTTPS), we are protected against man in the middle attacks.

My main concern is that the cache could be accessible by other domains or through the users filesystem, where i suppose the data is stored. Sadly there is no documentation about this.

To provide more insight into my application:

• PWA running on a nginx
• .NET Backend running on the same domain and is accessible by appending "/api"

I am aware that I can navigate to the Cache Storage in the Chrome Dev Tools for example, but I do not know where they are stored, and whether they are encrypted or not.

Thanks in advance