<p>Our investigations have shown us that not all browsers respect the HTTP cache directives in a uniform manner.</p>

<p>For security reasons we do not want certain pages in our application to be cached, <strong>ever,</strong> by the web browser. This must work for at least the following browsers:</p>

<ul>
<li>Internet Explorer 6+</li>
<li>Firefox 1.5+</li>
<li>Safari 3+</li>
<li>Opera 9+</li>
<li>Chrome</li>
</ul>

<p>Our requirement came from a security test. After logging out from our website you could press the back button and view cached pages.</p>

Setting the modified http header to some date in 1995 usually does the trick.
Here's an example:
```
Expires: Wed, 15 Nov 1995 04:58:08 GMT
Last-Modified: Wed, 15 Nov 1995 04:58:08 GMT
Cache-Control: no-cache, must-revalidate
```