For the CSS file, some browsers are buggy so it really should be set to "Cache-Control: public".
See http://www.acunote.com/blog/2008/07/why-you-should-use-cache...