| Server | cloudflare-nginx |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Content-Security-Policy | default-src 'self'; connect-src https://localhost https://fierce-escarpment-8017.herokuapp.com https://*.instapaper.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.io 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://medium2.global.ssl.fastly.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self'; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com |
| X-Frame-Options | sameorigin |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| X-UA-Compatible | IE=edge, Chrome=1 |
| X-Powered-By | Kale |
| X-Obvious-Tid | 1446918496266:b1b708b3e31c |
| X-Obvious-Info | 18340-40e9a8e,3f5841c |
| Cache-Control | no-cache, no-store, max-age=0, must-revalidate |
| Expires | Thu, 09 Sep 1999 09:09:09 GMT |
| Pragma | no-cache |
| Tk | T |
| Strict-Transport-Security | max-age=15552000; includeSubDomains; preload |
| CF-RAY | 241ade396d260ef7-EWR |
| Content-Encoding | gzip |