There should be cache headers for identicons. At first it should be something short like an hour, but eventually it should be a "forever" cache and use cache-control: immutable. That should wait until #5 is finished to make sure changes don't break things.