@brevilo on WordPress.org
Created ticket #61711 on Core Trac:Password-protected pages lacking appropriate 'Cache-Control' request header