--- java/org/apache/catalina/authenticator/AuthenticatorBase.java 2011-08-23 17:42:36.000000000 +0000 +++ java/org/apache/catalina/authenticator/AuthenticatorBase.java 2011-08-23 17:42:42.000000000 +0000 @@ -476,7 +476,6 @@ // Make sure that constrained resources are not cached by web proxies // or browsers as caching can provide a security hole if (constraints != null && disableProxyCaching && - !request.isSecure() && !"POST".equalsIgnoreCase(request.getMethod())) { if (securePagesWithPragma) { // Note: These can cause problems with downloading files with IE