Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.


To safeguard your privacy we have disabled the browser's "reload" or "refresh" facility while you are in sensitive areas of our web site. Reloading pages will function normally once you have left this area . . . but until then please refrain from "reloading" pages.

I'm not understand what that page is trying to say? It says refresh is disabled but I do a Ctrl+R and the browser refreshed..

share|improve this question

1 Answer 1

up vote 4 down vote accepted

Well, Mr. Gibson is a bit of a tool when it comes to security. The appropriate term is charlatan.

His secure pages cause the pages to be cached locally, so when you hit refresh it doesn't make a web request, but just pulls the html from local storage.

He didn't "disable" refreshing, he modified the default behaviour of a page request. You can still refresh the page, and you can make the request again.

It really doesn't do much for security because the sensitive stuff is now sitting in your cache for a really long time. It isn't any more secure than making the request again.

share|improve this answer
'Tool' hahahaha- :) –  Rory Alsop Oct 14 '11 at 17:06
@RoryAlsop explain your comment –  Pacerier Oct 15 '11 at 12:16
@Pacerier - Steve's description of Mr Gibson - have a wee read of attrition.org/errata/charlatan/steve_gibson –  Rory Alsop Oct 15 '11 at 21:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.