Re: Prevent caching of pdf files
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
On Fri, 05 Dec 2003 17:33:00 EST, bsec <[email protected]> said: > Currently on a secure Internet application we use the "Cache-Control: No Hmm.. "secure application".. but then you say: > for details.) As we have no control over the client machines accessing "no control". Doesn't give me warm fuzzies... > our application, is there another way to prevent pdf files from being > automatically stored on the clients without using the no-cache header? Can you explain the problem you're trying to solve by not caching? Is it merely a "stale content" issue with PDF's you generate on the fly, or are you worried about a copy being left on the target machine's disk? If the latter, what steps are you already taking to close all the OTHER holes this brings up (everything from the fact that a temp copy will be on the disk ANYHOW while the PDF viewer has it open and probably scavengable off disk afterwards, to the user being able to take a screen dump or a digital camera picture of the info)?
signature.asc
(application/pgp-signature, 226 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Exmh version 2.5 07/13/2001 iD8DBQE/0UZ5cC3lWbTT17ARAti8AJ0XOIrjDd2tPnj4XTpbv2gGL4jG0QCeMFp/ w/ObJVGtfgr4BZz+Z/COQXk= =+IeX -----END PGP SIGNATURE-----