RE: Prevent caching of pdf files

Hi,

I think the solution suggested by Peter is right. In HTTP 1.1 caching is
controlled by the "cache-control" directive in the response header. But
the value "no-cache" tells the browser not to use the response to serve
a future request, it does not prohibit the browser from writing the
response to a temporary file. 

Whereas a value of "no-store" tells the browser that it should never
write the contents of the response to disk in any circumstances. 

Regards,
Abhishek Kumar
Paladion Networks

-----Original Message-----
From: bsec [mailto:bsec@xxxxxxxxx] 
Sent: Saturday, December 06, 2003 4:03 AM
To: SECPROG@xxxxxxxxxxxxxxxxx
Subject: Prevent caching of pdf files


Currently on a secure Internet application we use the "Cache-Control: No
Cache" header to prevent information from caching on client machines.
We would like to begin to provide pdf files via our application;
however, there is a known issue with accessing pdf files with IE 6.0 sp1
when the no-cache header is used.  (Please refer to 
http://support.microsoft.com/default.aspx?scid=kb;en-us;812935
for details.)  As we have no control over the client machines accessing
our application, is there another way to prevent pdf files from being
automatically stored on the clients without using the no-cache header?

Thanks in advance,
-Brett