Make Your Blog

Cacheable Login Page Found

It is possible to steal or manipulate user session and cookies, which may be used to

Impersonate a legitimate user, allowing the hacker to view or alter user details, and to perform transactions o behalf of that user.

Do not allow caching of login pages.  Discuss with solution architect in your project to discuss if business requirements are against this.