Re: [Q] How to prevent storage of SSL session information?

From: 2Host.com - Robert (admin@-NOSPAM-2host.com)
Date: 10/18/02


From: "2Host.com - Robert" <admin@-NOSPAM-2host.com>
Date: Fri, 18 Oct 2002 05:04:55 -0700


Chanho Jung wrote:
>
> Hi, ALL !!!
>
> Currently I am writing a Web Pages supporting SSL.
>
> I am testing that. However, I have a problem that not disconnect session
> information after another domain page visiting and IE BACK Button.
>
> https://domain.com/info.html (session is established) --->
> http://www.yahoo.co.kr ---> [BACK BUTTON] ---> https://domain.com/info.html
> (session is not connected)
>
> Help me !!!
>
> Thank you.

I don't understand what you're asking? You want to make the person's web
browser not store the secure page they visited, if they hit back on
their browser? You can't stop their browser from storing it, it's not
possible. You can try do do some no-caching, or some sessions and force
reloads, etc., but if their browser doesn't follow your rules (and they
don't always), you can't stop them. You can only stop people from
accessing the page in the first place, but once they have and viewed the
content, what happens from there, barring a few things you can _try_ on
your server-end of things, you have no control over.

-- 
Regards,
Robert McGregor - Email: admin@(remove)2host.com. Phone: 530-941-0690
Server admin, support & programing for shared & dedicated web servers
Secure, reliable hosting you expect and deserve! http://www.2host.com


Quantcast