News for hackers. Stuff that matters.
Re:HTTP headers we don't want by khc on Tuesday May 15, 2018 @04:51PM (#17077771)
In addition, having Expires set to a date in the past in not the same as "Cache-Control: no-cache, private". The latter instructs CDNs not to cache the file whereas the former doesn't (CDN is allowed to cache the file and revalidates with the origin).

Disclosure: I work at cloudflare.

Re:HTTP headers we don't want by crooked-v on Tuesday May 15, 2018 @05:15PM (#17077933)
You can do that without the Expires header, though.

    Cache-Control: max-age=0, s-maxage=3600
...or similar permutations.
Re:HTTP headers we don't want by khc on Tuesday May 15, 2018 @08:53PM (#17079169)
Yup just want to point out the replacement suggested in the blog is incorrect. Simply max-age=0 should be sufficient to emulate Expires: past date