8-) The very concept of *browser* cache is not mandatory.
So there is no "right" way, and "workable" way has nothing to do with SUN and JSP (you know, browser does not know what is on server -- JSP or plain C.)
RTFM RFC HTTP 1.1 (RFC2616) states that there may be user agent which will cache things. To avoid caching, you should use <META HTTP-EQUIV...> for IE 3+ or combination of 4 header (Pragma:, Expires:, Cache-control and some else) described in rfc mentioned above.
Headers are present in request objects.