HTTP Headers for medium.com

Responds with HTTP 200 OK from cloudflare — 3 of 6 security headers present.

URL to Check
200 OKhttps://medium.com/
Security Headers3/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (22)
alt-svch3=":443"; ma=86400
cache-controlno-cache, no-store, max-age=0, must-revalidate
cf-cache-statusDYNAMIC
cf-ray9f144df308dc703c-IAD
connectionclose
content-encodinggzip
content-security-policyframe-ancestors 'self' https://medium.com
content-typetext/html; charset=utf-8
dateFri, 24 Apr 2026 10:08:03 GMT
link<https://glyph.medium.com>; rel="preconnect", <https://www.google.com>; rel="preconnect", <https://www.gstatic.com>; rel="preconnect", <https://glyph.medium.com/css/unbound.css>; as="style"; rel="preload"
medium-fulfilled-byedgy/8.15.0, valencia/main-20260423-082952-4dacbf19a3, lite/main-20260423-222551-8485cf1164, rito/main-20260423-222551-8485cf1164
medium-missing-time89
servercloudflare
set-cookie_cfuvid=ykXwJt0C38_9UCp2n19yeTPRZPdwmG0NPiLPKLFowDY-1777025283.0430868-1.0.1.1-yX8vECClRqIG79eIO2pYcPYoeie45yEWNgzQZkXQZc8; HttpOnly; SameSite=None; Secure; Path=/; Domain=medium.com
strict-transport-securitymax-age=31536000; includeSubDomains; preload
varyAccept-Encoding
worker-cache-keymedium.com/?li=false&gate-enable_medium_com_canonical_urls=true&gate-enable_susi_remember_me=true
worker-cache-middlewaretrue
worker-missing-cookies1
x-content-type-optionsnosniff
x-envoy-upstream-service-time78
x-request-received-at1777025283097
Related
HTTP Headers for medium.com — cloudflare | ProfileMyIP