HTTP message caching

Typically, you SHOULD NOT allow sensitive data, returned over an authenticated (HTTPS) connection, to be cached. But if you do, you MUST make sure there is no risk that network appliances cache data in clear text. Speak to the Cyber security team for help.