There are no public caches with HTTPS, but there are still private browser and CDN caches to contend with. To ensure your origin server is hit on subsequent HT

There are no public caches with HTTPS, but there are still private browser and CDN caches to contend with. To ensure your origin server is hit on subsequent HTTPS requests, you would still need to configure response headers for cache validation [1] to be Cache-Control: no-cache instead of Cache-Control: private [1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ca...