> Odd. Works here with "Cache-Control: public". "Cache-Control: public, must-revalidate" works now fine for me. Problem was that Pragma: no-cache was in HTTP HEADER -Matthias > Are you sure your HTTP server did not add any additional > headers blocking > caching on the authenticated objects? > > Try enabling "log_mime_hdrs" and inspect the response headers. > > Regards > Henrik >