Skip to content

Coverage gap: non-CDN caches must ignore CDN-Cache-Control #194

@mnot

Description

@mnot

Coverage gap

RFC 9213 (Targeted Cache-Control): a cache processes only the targeted field that names it; caches not addressed by CDN-Cache-Control must ignore it and fall back to Cache-Control. The suite never verifies that a non-CDN (browser/shared) cache ignores CDN-Cache-Control — all 24 of the 25 CDN tests are cdn_only (verified), so they never run on a non-CDN cache.

Currently tested

tests/cdn-cache-control.mjs — precedence of CDN-Cache-Control over Cache-Control for the CDN, all cdn_only.

Suggested test

A non-cdn_only test where CDN-Cache-Control: no-store but Cache-Control: max-age=3600. Assert a non-CDN cache reuses the response (it ignores CDN-Cache-Control and honors Cache-Control).

Tag

[MUST] — RFC 9213 §2


Filed from an AI-assisted (Claude Code) coverage audit against RFC 9111/9110/9213, under maintainer direction. Absence was grep-verified; the spec section number and strength are from model knowledge, not re-read from the RFC text — worth confirming before writing the test.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions