logo       

Re: Prevent caching of pdf files: msg#00002

security.programming

Subject: Re: Prevent caching of pdf files

On Fri, 05 Dec 2003 17:33:00 EST, bsec <bsec@xxxxxxxxx> said:
> Currently on a secure Internet application we use the "Cache-Control: No

Hmm.. "secure application".. but then you say:

> for details.) As we have no control over the client machines accessing

"no control". Doesn't give me warm fuzzies...

> our application, is there another way to prevent pdf files from being
> automatically stored on the clients without using the no-cache header?

Can you explain the problem you're trying to solve by not caching? Is it
merely a "stale content" issue with PDF's you generate on the fly, or are you
worried about a copy being left on the target machine's disk? If the latter,
what steps are you already taking to close all the OTHER holes this brings up
(everything from the fact that a temp copy will be on the disk ANYHOW while the
PDF viewer has it open and probably scavengable off disk afterwards, to the
user being able to take a screen dump or a digital camera picture of the info)?

Attachment: pgplmcyAP1qWN.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise