Re: no-vary: security - cache poisoning

Am 19.01.2026 um 07:24 schrieb David Benjamin:
> ...
> The draft *does* use a separate header. It is *not* a Cache-Control 
> option. I mentioned it because another thread suggested it.
> ...

Actually, the proposal is to explain *why* this isn't using 
Cache-Control. If this is one of the reasons, we should definitvely add 
this to the list of reasons.

Best regards, Julian

Received on Monday, 19 January 2026 06:42:36 UTC