Isn't advantageous for a browser to cache static content?
<p>I have been doing some OWASP tests and one of the low level threats is :</p>

<pre><code>Low (Medium)    Incomplete or No Cache-control and Pragma HTTP Header Set

Description

The cache-control and pragma HTTP header have not been set properly or are missing allowing the browser and proxies to cache content.

URL

&lt;redacted url&gt;

Evidence

public, must-revalidate, proxy-revalidate
</code></pre>

<p>The suggestion from OWASP is to prevent the content from being cached ... but this doesn't make any sense. I thought it helped your page loading speed if certain contents are cached by the browser? In addition how is caching static content a security threat?</p>