The description for #1 is technically wrong, since Apache will send 304 Not Modified headers whenever it serves a static file with the appropriate request heade

The description for #1 is technically wrong, since Apache will send 304 Not Modified headers whenever it serves a static file with the appropriate request headers. What the Expires header actually does is prevents the browser from sending the request at all (unless the page is manually refreshed). #4, the Auth* lines aren't necessary, only the order, deny, and allow lines. #6, why are we using browser matching and not the Accept-Encoding header?