Distinguish storage, validation and shared caching. Three response policies show when to use public max-age, private no-cache and no-store.
Cache-Control / HTTP / Caching / Web Development / Privacy / Security / Browser / CDN
Separate a request timeout from the total retry budget, interpret Retry-After, and avoid duplicating writes when the server outcome is unknown.
HTTP / Retries / Timeouts / Idempotency
Distinguish response access from request sending, inspect an OPTIONS preflight and configure explicit origins for credentialed browser requests.
HTTP / CORS / fetch / API / Troubleshooting