Take a look at this thread:
https://openacs.org/forums/message-view?message_id=27295
(and I think it's been discussed more recently as well
but that is what my search turned up).
A quick fix is to set the appropriate HTTP headers in the sitewide master template.