-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=15768000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2