| Server | Apache |
| Strict-Transport-Security | max-age=16070400; includeSubDomains; preload |
| Upgrade | h2,h2c |
| Connection | Upgrade, Keep-Alive |
| Expires | Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-Control | private, no-store, proxy-revalidate, no-transform |
| Pragma | no-cache |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | sameorigin |
| X-XSS-Protection | 1; mode=block |
| X-Pad | avoid browser bug |
| Access-Control-Allow-Origin | no |
| Content-Transfer-Encoding | chunked |
| Content-Security-Policy | base-uri 'self'; |
| Referrer-Policy | no-referrer-when-downgrade |
| Vary | User-Agent,env=!dont-vary |
| Public-Key-Pins | pin-sha256="jnpFLRVp143VWHYVfHdarUK571SB/m6XrUcdKNIaCg4="; pin-sha256="yAi5M3CVToJM53RmYdhKt233xECziC5XqonzKOyBrTY="; max-age=432000; includeSubdomains; report-uri="https://pkp.bougeret.fr/report.php?p=2" |
| Expect-CT | enforce,max-age=30 |
| Keep-Alive | timeout=50, max=512 |
| Transfer-Encoding | chunked |
| Content-Type | text/html; charset=utf-8 |