Cache-Control: no-store

Forbids caches from storing the response.

Use no-store for personalized or sensitive responses. It does not guarantee secrecy: users can still save responses, and some intermediaries handle it poorly.

httpcacheheaderdirectivesecurity

Reference (http)

Cache-Control: no-store

Use no-store for personalized or sensitive responses. It does not guarantee secrecy: users can still save responses, and some intermediaries handle it poorly.

Common mistakes

Treating no-store as encryption or applying it to static assets, which kills performance for no benefit.

Sources

MDN HTTP Reference
OWASP HTTP Headers Cheat Sheet
IANA HTTP Field Name Registry