nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex
X-Firefox-Spdy: h2