8/15/2020 HTTP headers checker / Habr

All streams Development Administrating Design Management Marketing PopSci Log in Sign up

itsoft June 2, 2020 at 02:08 PM Ads

HTTP headers checker

Original author: Igor Tarasov

Hosting, Website development, Server optimization, Server Administration

Translation

For any site, it is important to properly configure the HTTP headers. A lot of articles have been written on the subject of headings. Here
we have summarized the lessons learned, the RFC documentation. Some of the headings are mandatory, some are obsolete, some can
be confusing and contradictory. We did a parsing to automatically check the HTTP headers of the web server.

Correct HTTP headers increase security and trust in the site, including from search engines, can affect the site’s position in Yandex and
Google, save server resources, reduce server load, thereby increasing the server response speed, which again affects the ranking of the
site in the search, save money on payment powerful hosting, which may not be required for the site when configured correctly.

Check not only web-page headers, but also headers of static content, images, css and js files. Check separately If-Modified-Since and If-
None-Match for correct your web server reply 304 Not Modified.

Unlike many other services that simply show headers, our headers checker allows:

1. get total score of web-server settings quality and advices what possible to improve;

2. set the value of typical headers;

3. add your own custom headers;

4. specify the version of the HTTP protocol: 1.0, 1.1, 2 (checks if HTTP / 2 is supported);

5. specify the request method, timeout, and post data to send to the server;

6. the service also checks if the response to the If-Modified-Since, If-None-Match requests is correct if the server response contains
Last-Modified or ETag;

7. see HTTP-request data and other request params.

We do not claim to be the ultimate truth. For individual content and for individual projects, of course, there may be deviations. But this
service will definitely tell you what you should pay attention to, it may be useful for you to edit your headers. The following is a list of
what the verification service pays attention to. Why so, read in articles on a habr.

Mandatory headers
Date

Content-Type specifying charset for text content preferably utf-8

Content-Encoding compression for text content

Obsolete and unnecessary headers

Server with a detailed version of the web server

X-Power-By

X_ASPNET-Version

Expires

Pragma

https://habr.com/en/post/504990/ 1/4
8/15/2020 HTTP headers checker / Habr

P3P

Via

X-UA-Compatible

Desired headers for security

X-Content-Type-Options

X-XSS-Protection

Strict-Transport-Security

Referrer-Policy

Feature-Policy

Content-Security-Policy or Content-Security-Policy-Report-Only to disable inline scripts and styles.

Caching headers
Required for static content with a long cache term and highly desirable for dynamic content with a short cache term.

Last-Modified

ETag

Cache-Control

Vary

Важно, чтобы сервер корректно отвечал на заголовки: If-Modified-Since и If-None-Match

HTTP/2
Nowadays the server must support HTTP/2. By default, the service checks the server for HTTP/2. If your server does not support HTTP/2,
then select HTTP/1.1.

Tags: http-заголовки, http-запрос, http/2, http2

Hubs: Hosting, Website development, Server optimization, Server Administration

0 1 936 2 Share

20.0 13.1
Karma Rating

Игорь Тарасов @ itsoft

Пользователь

SIMILAR POSTS

December 9, 2019 at 06:55 PM

How to cook RTSP on your website in 2020, or why the boars will not have a chance to run away
+4 14k 2 1

https://habr.com/en/post/504990/ 2/4
8/15/2020 HTTP headers checker / Habr

June 20, 2019 at 05:55 PM

Simple story behind Refresh and Access tokens

+10 1.8k 1 3

March 1, 2019 at 01:13 PM

Why does Dodo Pizza need 250 developers?

+21 2.6k 3 0

Ads

Comments 2

denaspireone June 3, 2020 at 08:12 AM 0

Хабр молодец, решает за юзера какой язык поста отображать, даже если ты ему принудительно пишешь в строке /ru/ — получаешь
English. Js животворящий

itsoft June 3, 2020 at 09:06 AM 0

Этот префикс за переключение интерфейса отвечает. У меня урл выглядит так habr.com/ru/post/504990/?
reply_to=21692310#comment_21692310

Интерфейс русский.

Внизу страницы есть Настройки языка. Если там переключиться на английский тогда habr.com/en/post/504990 — такой будет урл.

Only users with full accounts can post comments. Log in, please.

TOP POSTS

Day Week Month

Памятка для пострадавшего от слезоточивого газа/перцового баллона

+132 47.2k 251 110

Audio over Bluetooth: most detailed information about profiles, codecs, and devices
+22 112k 10 8

Technical analysis of the checkm8 exploit

+22 59.6k 5 4

Java vs .Net: Who will Reign in the Future?

+3 6.2k 5 2

Your account Sections Info Services

https://habr.com/en/post/504990/ 3/4
8/15/2020 HTTP headers checker / Habr

Log in Posts How it works Ads

Sign up Hubs For Authors Subscription plans

Companies For Companies Content

Users Documents Seminars

Sandbox Agreement Megaprojects

Terms of service

© 2006 – 2020 «Habr» Language settings About Support Mobile version

https://habr.com/en/post/504990/ 4/4