I don’t find get the practical difference between Cache-Control:no-store and Cache-Control:no-cache.
As far as I know, no-store means that no cache device is allowed to cache that response. In the other hand, no-cache means that no cache device is allowed to serve a cached response without validate it first with the source. But what is that validation about? Conditional get?
What if a response has no-cache, but it has no Last-Modified or ETag?
Regards.
Exactly checking
Last-ModifiedorETag. Client would ask server if it has new version of data using those headers and if the answer is no it will serve cached data.Update
From RFC