Quiz — HTTP Caching and Conditional Requests

GET /me returns the signed-in user's profile with Cache-Control: public, max-age=600, behind a CDN. What can go wrong?

The CDN may serve one user's profile to another; it should be private or no-store

Users may see their own profile up to ten minutes out of date, and nothing worse

Nothing, because the user is signed in