777 permissions in cache

Some additional information: I switched to your plugin after getting hacked through a different caching plugin that created cached pages with 666 permission. Hackers were able to insert links into cached pages. According to WordPress, “No directories should ever be given 777, even upload directories. Since the php process is running as the owner of the files, it gets the owners permissions and can write to even a 755 directory.”
(see https://www.ads-software.com/support/article/changing-file-permissions/)

My host says, “Permissions like 755 or 775 are sufficient for all applications as our servers are configured to run scripts as your own username (not as the web server), so you never need to give world-writable rights to your files and directories.”

Hello @geomouchet

Thank you for your inquiry and I am happy to assist you with this.
W3 Total Cache creates a cache folder and the files within. However, W3 Total Cache does not set the permissions. I.E. the created files and folders will have permission that was set globally on your server.
For example, if you’ve set the permissions on your server for files 644 and for folders 755, those permissions will be set to the files/folders created by W3TC.
To conclude, you should set the global permissions on your server for folders 755 and for files 644.
Thanks!