RE: Prevent caching of pdf files

From: Abhishek Kumar (abhishek.kumar_at_paladion.net)
Date: 12/08/03

  • Next message: Michael Wojcik: "RE: Prevent caching of pdf files" 
    To: <secprog@securityfocus.com>
Date: Mon, 8 Dec 2003 10:07:56 +0530

    Hi,

    I think the solution suggested by Peter is right. In HTTP 1.1 caching is
    controlled by the "cache-control" directive in the response header. But
    the value "no-cache" tells the browser not to use the response to serve
    a future request, it does not prohibit the browser from writing the
    response to a temporary file.

    Whereas a value of "no-store" tells the browser that it should never
    write the contents of the response to disk in any circumstances.

    Regards,
    Abhishek Kumar
    Paladion Networks

    -----Original Message-----
    From: bsec [mailto:bsec@cotse.net]
    Sent: Saturday, December 06, 2003 4:03 AM
    To: SECPROG@SECURITYFOCUS.COM
    Subject: Prevent caching of pdf files

    Currently on a secure Internet application we use the "Cache-Control: No
    Cache" header to prevent information from caching on client machines.
    We would like to begin to provide pdf files via our application;
    however, there is a known issue with accessing pdf files with IE 6.0 sp1
    when the no-cache header is used. (Please refer to
    http://support.microsoft.com/default.aspx?scid=kb;en-us;812935
    for details.) As we have no control over the client machines accessing
    our application, is there another way to prevent pdf files from being
    automatically stored on the clients without using the no-cache header?

    Thanks in advance,
    -Brett

  • Next message: Michael Wojcik: "RE: Prevent caching of pdf files"

    Relevant Pages