do you mean that when you revisit the login page, IE will "help" you to fill out the form, by pre-populating it with what it "remembers" from last time? This is a "feature" within IE itself, and should be up to a network/sys admin type person to configure all your clients to disable this feature. either through login scripts or running a policy on the box, or... lots of ways. It's found: Tools | Internet Options | Content | Personal Information click the 'AutoComplete' button. as for what you can do on the server side, ensure all your no-cache headers are enabled for the login page.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: Friday, May 14, 2004 1:46 PM > To: [EMAIL PROTECTED] > Subject: Disabling Drowser Cache of UID / PW > > > Hi, > > I have a nasty security issue. I am running Tomcat 4.0.3 to run a web > application. The first page is signing in. IE caches the user ID and > password unless explicitely told to do otherwise. I am under > a mandate to > disable this caching on a global basis, but I have no idea > how. Any ideas > out there? > > --Tim Sabin > US Courts > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
