Strange Firefox/Shibboleth interaction with Cache-Control and shib session

[Micky Williamson]

Fellow Shibboleth users,
I’m seeing a strange integration between Firefox caching, and Shibboleth.
We have the following configuration:

idP->Apache w/Shibboleth->Application

The desired behavior is to have the user login to the app each time they open the browser.  This seems to work for Chrome, it makes the user authenticate, the shib session gets generated, and all is good.  With Firefox, it seems to be caching something.  We have set a Cache-Control directive at the Apache level, and seem some improvement, but not all.  When interrogating the headers that get returned, Firefox seems to set the Cache-Control to “private, no-store,no-cache, max-age=0”. But Chrome does not.

Anybody run into this?

Thanks
Micky
This communication may contain proprietary or other confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.