https://www.xbcatm.com/tags/web-security/Illustrated field notes on HTTP, DNS, TLS, Caddy, SSH, releases, and recovery.Hugoen-ushttps://www.xbcatm.com/notes/security-headers-should-describe-the-actual-page/Sat, 22 Aug 2026 00:00:00 +0000https://www.xbcatm.com/notes/security-headers-should-describe-the-actual-page/A compact policy is safer when it matches the resources a static page really loads.