Software Architect's Handbook

Specifying cache-control directives

Cache-control directives in a response can control whether the response should be cached, under what conditions it can be cached, and for how long it should be cached. If a response contains sensitive information that you do not want cached, a no-store cache-control directive can be used, which will prevent browsers as well as any intermediate caches (for example, a content delivery network), from caching the response. Alternatively, a response can be marked as private, which will allow caching in a user's browser but not in any intermediate caches.

A cache-control directive that is slightly different than no-store is the no-cache directive. It is used to specify that a response should not be used from ...