Please be patient with me, as I'm not too knowledgeable on this topic. This question has been prompted by Hijacked session: Signed in as someone else.
When I access my user page on Stackoverflow, the first request is a GET request and the response has the cache header
Cache-Control: public, max-age=120. The response for this request is a web-page that contains private information about me such as e-mail address, and additionally prompts additional requests, some marked
private and some
public mean that this page is permissible for general, not per-user caching? Isn't it problematic when this page contains stuff like my e-mail address?
I mean, wouldn't all pages on any stackexchange site to be marked as
private if the user is logged-in, since by definition this page will be localized to that user?