no-store
must-understand
(unless)
private
no-cache
- may serve stale on revalidation failure
max-age
s-maxage
(Auth override)
- must not serve stale on revalidation failure, rather return error
must-revalidate
(Auth override)
public
(Auth override)proxy-revalidate
no-transform