For a shared-computing environment, disabling browser
cache (including ssl pages, which IE doesn't do by
default) should be helpful.
For a privately owned machine, again, it might be
helpful not to cache pages against spyware risk.
But, yes, a custom browser might easily by-pass such a
control (precaution).
That aside, a poisoned browser (malicious bho on IE,
for example, or an extension in FF) may store visited
pages even if its caching ability is disabled.
-pilon
--- smith.norton@gmail.com wrote:
Many articles on the net speaks of disabling browser
caching.
I don't feel its secure because even if a browser
faithfully follows the protocol, a programmer might
write a small browser of his own which caches all
pages.
What do others say?
-------------------------------------------------------------------------
This List Sponsored by: SPI Dynamics
ALERT: "How A Hacker Launches A Web Application
Attack!"
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks
with real-world
examples of recent hacking methods such as: SQL
Injection, Cross Site
Scripting and Parameter Manipulation
https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
-------------------------------------------------------------------------
This List Sponsored by: SPI Dynamics
ALERT: "How A Hacker Launches A Web Application Attack!"
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world
examples of recent hacking methods such as: SQL Injection, Cross Site
Scripting and Parameter Manipulation
https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------
