API Design · Middle · Question 22 of 75

What does `Cache-Control: private, max-age=60` mean?

1The response is secret and encrypted
✓Correct answer: Only the user's browser may cache the response, for 60 seconds; shared caches like CDNs must not
3Any cache may store it forever

Explanation

Use public (or s-maxage) for shared caches and no-store for sensitive data that must never be stored.

Further reading

Test yourself

Take the API Design · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.