.htaccess ExpiresDefault (2W) is much too low. Should be ~1Y

Thanks @_nod! Looking at 🐛 Include Cache-Control header on 301 redirects. RTBC and thinking about explicit rules per mime type I think we should keep this as-is and let the redirect do its own thing in the other issue.

Otherwise, this will end up for us in having to update the mime types for every new image type etc. - I don't thing that's a good thing.
For such an example see https://www.supertechcrew.com/htaccess-rules-security-cache-redirect/ > "Caching rules"

Do you agree?

Setting this back to "Needs review" for that reason. I still think the changes are good.

Seems fine to me. lets see what the committers say.

Looked at the other issue and I agree with #29, that makes sense to me RTBC +1

Changes to .htaccess need a release note and a CR because they can require users to make updates since this can be hand edited. See 🐛 Duplicate X-Content-Type-Options headers both with the value nosniff Fixed as an example of the things needed.

I created a CR draft here: https://www.drupal.org/node/3349094 → and a release note snippet got added in the issue summary.

Please correct me if either the snippet, or the CR draft is incorrect, as I don't have enough insights.

Took a look at the change record and change makes sense. Examples of why the change happened should be useful to others.

Committed 67357a3 and pushed to 10.1.x. Thanks!

Discussed with @catch we agreed that js and image styles all have cache busting logic. This will change how long logos and favicons for. Even today if you change these it would be recommended to use a different file name because they are already cached for 2 weeks.

Funny question, I know. But should we backport this to Drupal 7? Also 14d there...

@Anybody I would open a separate issue to discuss - D7 is somewhat more conservative around changes and the considerations there might be different. If someone was already affected by this on D7 they likely would have already made this change to their site; nobody should be building new sites on D7.

Tweaked the release note snippet and changing tags.

Automatically closed - issue fixed for 2 weeks with no activity.

Change record published.