Amos Jeffries wrote:
Marked explicitly as "private" - aka cannot be cached by any middleware proxy (such as Squid) which may send it to other users. May be cached by a personal cache such as the browser storage.
--- But I don't have to log in. More importantly, wouldn't setting the 'ignore-private' in the refresh pattern override that?
