[Previous] [Next] [Index] [Thread]

Re: how do I keep a browser from caching files




On Mon, 22 Apr 1996, Chris Newton wrote:

> just tried this from with a cgi script, the browser being the netscape
> atlas preview release 1 navigator, and the file was written to disk cache.
> 
> Anything I should do to fix it?

Just the obvious ... replace it ... from the server perspective, refuse
to serve documents to old old browsers if you depend on the features of
newer versions.

But there really is no fool proof solution which doesn't require asserting
control over the machines which as the initial poster indicated was in
an unsupervised lab so even control may be impossible. 

And in any case ... it didn't sound like the application was running
with SSL or SHTTP so what is to stop a curious person from simply sniffing
the connection to the LAB machine.

A fundamental tenet of security is that you use protective measures which
cost a reasonable amount in contrast to the value of the items to be
protected. Many partial solutions have been mentioned but without any
notion of the cost of unauthorized exposure of the material there isn't
much more that can be said.

Dave Morris


References: