Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

To safeguard your privacy we have disabled the browser's "reload" or "refresh" facility while you are in sensitive areas of our web site. Reloading pages will function normally once you have left this area . . . but until then please refrain from "reloading" pages.

I'm not understand what that page is trying to say? It says refresh is disabled but I do a Ctrl+R and the browser refreshed..

share|improve this question
up vote 4 down vote accepted

Well, Mr. Gibson is a bit of a tool when it comes to security. The appropriate term is charlatan.

His secure pages cause the pages to be cached locally, so when you hit refresh it doesn't make a web request, but just pulls the html from local storage.

He didn't "disable" refreshing, he modified the default behaviour of a page request. You can still refresh the page, and you can make the request again.

It really doesn't do much for security because the sensitive stuff is now sitting in your cache for a really long time. It isn't any more secure than making the request again.

share|improve this answer
'Tool' hahahaha- :) – Rory Alsop Oct 14 '11 at 17:06
@RoryAlsop explain your comment – Pacerier Oct 15 '11 at 12:16
@Pacerier - Steve's description of Mr Gibson - have a wee read of – Rory Alsop Oct 15 '11 at 21:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.