I am logging in to my site using Chrome (on Ubuntu). Even if I logout and close my browser I can see the login POST request content (containing username and Password) using "Hexedit".
I have seen a similar question asked for IE, but I am not convinced with the answers provided. Most of them sounds like precautions only. I searched online for solutions. Someone suggested to use encryption on the client side, but that isn't a solution I can easily go for.
Gmail and Facbook login are not using any client side encryption (I can see my username and password sent in POST request without encryption); But I can't see any POST request saved for Gmail and Facebook using "Hexedit". So I suppose there is something that can be done?
How do I stop browsers (not just Chrome, but in general) from saving the content of POST requests sent to my site?