The leading browsers were fairly stubborn on caching SSL resources for a while -- specifically to disk -- but (I think) most of them now obey the magic words:

The leading browsers were fairly stubborn on caching SSL resources for a while -- specifically to disk -- but (I think) most of them now obey the magic words: Cache-control: public Some data here: http://stackoverflow.com/questions/174348/will-web-browsers-cache-content-over-https http://stackoverflow.com/questions/174348/will-web-browsers-... I'm interested in what the state of this is, myself, but I know that one of IE 9's improvements was HTTPS conditional requests.