Articles & Guides
Useful resources for web developers and system administrators
Security
Security Headers: CSP, HSTS, X-Frame-Options, nosniff
Which HTTP security headers to send and how: Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, nosniff and Referrer-Policy.
HTTP
HTTP Headers Explained: Request, Response and Caching
HTTP request and response headers in depth: every Cache-Control directive, ETag and 304, Vary, Content-Type, X-Forwarded-For, nginx config and curl checks.