{"action":"created","issue":{"url":"https://api.github.com/repos/remotestorage/spec/issues/95","labels_url":"https://api.github.com/repos/remotestorage/spec/issues/95/labels{/name}","comments_url":"https://api.github.com/repos/remotestorage/spec/issues/95/comments","events_url":"https://api.github.com/repos/remotestorage/spec/issues/95/events","html_url":"https://github.com/remotestorage/spec/issues/95","id":111587165,"number":95,"title":"Add clear rationale for requiring Expires: 0","user":{"login":"untitaker","id":837573,"avatar_url":"https://avatars.githubusercontent.com/u/837573?v=3","gravatar_id":"","url":"https://api.github.com/users/untitaker","html_url":"https://github.com/untitaker","followers_url":"https://api.github.com/users/untitaker/followers","following_url":"https://api.github.com/users/untitaker/following{/other_user}","gists_url":"https://api.github.com/users/untitaker/gists{/gist_id}","starred_url":"https://api.github.com/users/untitaker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/untitaker/subscriptions","organizations_url":"https://api.github.com/users/untitaker/orgs","repos_url":"https://api.github.com/users/untitaker/repos","events_url":"https://api.github.com/users/untitaker/events{/privacy}","received_events_url":"https://api.github.com/users/untitaker/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-10-15T10:20:01Z","updated_at":"2015-11-17T18:44:08Z","closed_at":"2015-11-17T13:15:24Z","body":"It's obviously got something to do with caching, and since we don't care about IE support, [we don't need to use the value `-1`](https://stackoverflow.com/questions/11357430/http-expires-header-values-0-and-1). It'd be nice to ciarify such intents in the spec."},"comment":{"url":"https://api.github.com/repos/remotestorage/spec/issues/comments/157466884","html_url":"https://github.com/remotestorage/spec/issues/95#issuecomment-157466884","issue_url":"https://api.github.com/repos/remotestorage/spec/issues/95","id":157466884,"user":{"login":"fkooman","id":616885,"avatar_url":"https://avatars.githubusercontent.com/u/616885?v=3","gravatar_id":"","url":"https://api.github.com/users/fkooman","html_url":"https://github.com/fkooman","followers_url":"https://api.github.com/users/fkooman/followers","following_url":"https://api.github.com/users/fkooman/following{/other_user}","gists_url":"https://api.github.com/users/fkooman/gists{/gist_id}","starred_url":"https://api.github.com/users/fkooman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fkooman/subscriptions","organizations_url":"https://api.github.com/users/fkooman/orgs","repos_url":"https://api.github.com/users/fkooman/repos","events_url":"https://api.github.com/users/fkooman/events{/privacy}","received_events_url":"https://api.github.com/users/fkooman/received_events","type":"User","site_admin":false},"created_at":"2015-11-17T18:44:08Z","updated_at":"2015-11-17T18:44:08Z","body":"OAuth is the least prescribing RFC I know, and they say this:\r\n> \r\n   The authorization server MUST include the HTTP \"Cache-Control\"\r\n   response header field [RFC2616] with a value of \"no-store\" in any\r\n   response containing tokens, credentials, or other sensitive\r\n   information, as well as the \"Pragma\" response header field [RFC2616]\r\n   with a value of \"no-cache\"."}}