Cache-Control tells browsers and CDNs how long to keep a response. Use immutable + max-age=31536000 for fingerprinted assets and short or no-cache for HTML.
RFC 5861 — HTTP Cache-Control Extensions for Stale Content