typekit.com | Analytics by SecurityHeaders

HTTP Headers report for typekit.com

Header Name Header Data
HTTP status code 200
Content-Type text/html; charset=utf-8
X-Frame-Options SAMEORIGIN
X-Content-Type-Options nosniff
Referrer-Policy strict-origin-when-cross-origin
X-Ratelimit-Limit 200
Content-Security-Policy
Status 200 OK
X-Xss-Protection 1; mode=block
X-Cache Miss from cloudfront
X-Permitted-Cross-Domain-Policies none
Cache-Control max-age=0, private, must-revalidate
Via 1.1 ee47c4d401aca1a1f5c2ee96ce3267e4.cloudfront.net (CloudFront)
X-Amz-Cf-Id f5dNT4-FoA2708GyXeJRSGTS2R09te2-8Yidpt0wO6Hn8frmqu9MVg==
Vary Accept-Encoding
X-Ratelimit-Remaining 199
Strict-Transport-Security max-age=31536000; includeSubDomains
Connection keep-alive
Date Thu, 17 Apr 2025 12:58:05 GMT
Feature-Policy camera 'none'; geolocation 'none'; microphone 'none'; usb 'none'; payment 'none'
X-Amz-Cf-Pop AMS1-P2
X-Runtime 0.458682
Server nginx
X-Download-Options noopen
X-Request-Id 22a6c4ba480027d34766b027662cdebc
Etag W/"3a0283651cfd0ef72bdc0921b376cc46"
Set-Cookie pid=16679f1209f214b716b463a0981c0d49; path=/; expires=Sat, 17 May 2025 12:58:05 GMT; secure

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar