Work-related, but maybe interesting for everybody else. The meat of the article is that if your website tries to serve up Word or Excel files (or, as far as I can tell, other kinds of binary files like maybe PDF) over SSL, you'd better not disable caching with "Cache-Control: no-cache".