Static assets, clearly documented.

Cache-Control

A cache policy describes how long a response can be reused. Versioned assets can have a long cache lifetime; frequently edited documents benefit from revalidation.

Cache-Control: public, max-age=3600

Content types

Serve each file with its matching media type. Stylesheets use text/css, JSON uses application/json, and images use the type of their actual encoding.

File names and versions

When an asset changes, a new versioned filename allows existing pages to keep referencing the old file. Publish the new assets before updating the document that references them.

Transport

HTTPS protects files while they travel between the browser and the server. Certificate validation and regular renewal are part of maintaining an HTTPS endpoint.