RE: Meaning of "disabling browser caching"

["Martin O'Neal" <martin.oneal () corsaire com>]

As a generic suggestion (that works for the majority of situations, on
the majority of browsers) you are looking for something like:

Pragma: No-cache
Cache-control: no-cache, no-store, private, must-revalidate, max-age=0
Expires: 0

This won't stop the back button working, but it will suggest to the
browser that it should read the content from the site again, not simply
redisplay it from the cache.  The acid test of whatever measures you use
is to use ethereal or a MITM proxy to see what is actually requested by
the browser, and when.  Also, open your local cache directory and see
what the browser is really storing to disk...

Martin...




----------------------------------------------------------------------
CONFIDENTIALITY:  This e-mail and any files transmitted with it are
confidential and intended solely for the use of the recipient(s) only.
Any review, retransmission, dissemination or other use of, or taking
any action in reliance upon this information by persons or entities
other than the intended recipient(s) is prohibited.  If you have
received this e-mail in error please notify the sender immediately
and destroy the material whether stored on a computer or otherwise.
----------------------------------------------------------------------
DISCLAIMER:  Any views or opinions presented within this e-mail are
solely those of the author and do not necessarily represent those
of Corsaire Limited, unless otherwise specifically stated.
----------------------------------------------------------------------
Corsaire Limited, 3 Tannery House, Tannery Lane, Send, Surrey, GU23 7EF
Telephone: +44(0)1483-226000  Email:info () corsaire com


-------------------------------------------------------------------------
Sponsored by: Watchfire

Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web
application security assessments should be considered a crucial phase in
the development of any web application. What methodology should be
followed? What tools can accelerate the assessment process?
Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701300000007t9h
--------------------------------------------------------------------------