Re: Back button after log out should not show secure content.

2010-11-09 Thread Ken McWilliams
Hey that is exactly what I needed... My boss came in and said "This all looks good but my bank does this..." so it was eureka on the the first line. Thank you! On Tue, 2010-11-09 at 18:02 +0100, Paweł Wielgus wrote: > Hi all, > You can read some old tests about this problem here: > http://poul

Re: Back button after log out should not show secure content.

2010-11-09 Thread Paweł Wielgus
Hi all, You can read some old tests about this problem here: http://poulwiel.blogspot.com/2009/01/browser-back-button-and-caching-problem.html maybe they will help You. Best greetings, Paweł Wielgus. 2010/11/9 Maurizio Cucchiara : > Probably I'm wrong, but don't you achieve this by disabling bro

Re: Back button after log out should not show secure content.

2010-11-09 Thread Maurizio Cucchiara
Probably I'm wrong, but don't you achieve this by disabling browser caching via http headers? 2010/11/9 Ken McWilliams : > I know it depends on the browser but this is a best effort thing and am > looking for input on my current plan. > > When user signs on send the current date/time of the client

Back button after log out should not show secure content.

2010-11-08 Thread Ken McWilliams
I know it depends on the browser but this is a best effort thing and am looking for input on my current plan. When user signs on send the current date/time of the client along with credentials and record the offset in the session (if any). All subsequent pages will have a hidden date/time field.