Speaking of which, could we exempt api.php from this?
We could, we may, I just did it, though...
can anyone explain the C-C header logic to me? For now I see it is
Cache-Control: s-maxage=0, must-revalidate, max-age=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Also, opensearch has this:
Cache-Control: s-maxage=1200, must-revalidate, max-age=1200
what is the 'must-revalidate' doing here? why is there no 'public', etc?
"It sets sane Cache-Control: headers on its own," - does it? :)