HTTP Headers can do amazing things, it’s unfortunate they are so overlooked. I would say in security, where I work, good headers are the backbone of good web ap

HTTP Headers can do amazing things, it’s unfortunate they are so overlooked. I would say in security, where I work, good headers are the backbone of good web application security. They are: X-XSS-Protection X-Frame-Options Content-Security-Policy Strict-Transport-Security (HSTS) X-Frame-Options Expect-CT Feature-Policy All of these can be set very quickly in your Apache2.conf.