Solution from Department of Defence
After Googling: : "Do not save encrypted pages to disk" "web query" I got just 5 hits, one of which was this link to a .pdf file from the DOD entitled 'Desktop Application - Security Technical Implication Guide, Version 2 Release 1 dated 29 October 2004
http://209.85.135.104/search?q=cach...ry"&hl=en&gl=uk&ct=clnk&cd=2&client=firefox-a
to quote from it:
-------------------------------------------------------------------------------------------------------------------
NOTE: As indicated above, the required setting for the “Do not save encrypted pages to disk”
option is “enabled.” In this configuration, web pages that are sent over encrypted
connections, that is connections using the SSL protocol, are not cached in IE’s
Temporary Internet files folder. The reason to prevent caching this data is the
possibility that all or portions of the data are sensitive and the issue that access to the
Temporary Internet files folder might not be appropriately restricted.
If it is determined that a user of a web application requires IE’s caching capability and therefore
cannot enable the “Do not save encrypted pages to disk” option, a mitigating action can be taken.
This action requires the use of Windows’ directory permissions to restrict access to the
Temporary Internet files folder.
The Internet Options settings can be verified in IE from the General, Security, Privacy (IE 6.0),
and Advanced tabs of the Tools | Internet Options dialog.
NOTE: Some of these tabs may not be displayed if the default Windows Registry settings have
been changed.
The Advanced group of Internet Options controls some significant security parameters. To
preserve the level of security, it is necessary to prevent arbitrary changes to the settings of these
parameters.
• (DTBI021: CAT III) The SA will ensure that users are not permitted to make changes to the
Advanced group of IE Internet Options.
One method to prevent users from making changes is to set the value Advanced to 1 within the
Windows Registry key [HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel]
Unclassified
-------------------------------------------------------------------------------------------------------------------
Personally, I am going to rig up a VB script to delete the files in the Temporary Internet Files folder from a shortcut on the desktop at a single mouseclick whenever I deem it necessary.
Yahoo stocks data web queried into excel OK
