title: Explicitly disable caching for REST services
body: <p>I am to apply <code>Cache-Control: must-revalidate,no-cache,no-store</code> to all responses from out backend REST services. I have two questions about it:</p>
  
  <ul>
  <li>Is it common to do so? For some reason I was under the impression that it's not necessary, but I have no source to back this claim (yet).</li>
  <li>Is the value I mentioned above really sufficient, or should I set more?</li>
  </ul>
  
  <p>Edit: found this: <a href="https://devcenter.heroku.com/articles/increasing-application-performance-with-http-cache-headers#cache-prevention" rel="noreferrer">https://devcenter.heroku.com/articles/increasing-application-performance-with-http-cache-headers#cache-prevention</a>. Is says browsers may choose to cache when nothing is explicitly configured, so it means yes, it should be configured if I want to make sure cache is disabled.</p>