I’ve noticed a weird issue with Netlify’s caching.
When I set a global password for the site, most assets (larger than 100B from what I can see) do not return the correct 304 response even when the “e-tag” matches the “if-none-match” header.
Site-wide password protection does mean that every request for every asset must be authenticated at our origin, so this is expected behavior. For this reason, we wouldn’t recommend it for a user-facing application- it’s more to keep things under wraps while your application is in development.