How to Set cache control directives such as 'no-store, no-cache' for all authenticated pages

Question

We have an internet facing web application in SharePoint and it has custom pages with some custom web parts here we require to implement the proper cache control directives for all the authenticated pages, now our security team told 'It is recommended to set proper cache control directives such as 'no-store, no-cache' for all authenticated pages.'

Now this application has implemented cache control for authenticated pages as 'Private'.

Answer 1

You could refer following articles to configure cache settings for a web application in the SharePoint server.

Configure cache settings for a web application in SharePoint server

How to modify the Cache-Control HTTP Header when you use IIS

How can I implement “Cache-Control: no-store”