logo       

RE: Prevent caching of pdf files: msg#00008

security.programming

Subject: RE: Prevent caching of pdf files

> From: pgut001@xxxxxxxxxxxxxxxxx [mailto:pgut001@xxxxxxxxxxxxxxxxx]
> Sent: Friday, December 05, 2003 11:24 PM
>
> bsec <bsec@xxxxxxxxx> writes:
>
> >Currently on a secure Internet application we use the "Cache-Control: No
> >Cache" header to prevent information from caching on client machines.
>
> Cache-Control is an HTTP 1.1 (meaning it'll be ignored by
> HTTP 1.0) indication that the cache shouldn't return a cached response
> without revalidating with the origin server.

I assume this should be "no-cache is an...". "Cache-Control" is the name of
the header; "no-cache" is a directive that may be supplied as the value of
that header, which has the semantics you describe.

> What you want is no-store.

...which is another directive that may be supplied as the value of a
Cache-Control header. (See RFC 2616 14.9.2.)

Just wanted to clarify that for other readers.

--
Michael Wojcik
Principal Software Systems Developer, Micro Focus



<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise