
Security headers ship with your build
Security headers on static hosting used to mean bring your own nginx. Now they are a text file in your build root, and the origin applies them.
Ivan Roslov2 min read
Building Lessly in the open — decisions, retros, and the thinking behind the product.

Security headers on static hosting used to mean bring your own nginx. Now they are a text file in your build root, and the origin applies them.
Ivan Roslov2 min read
The banner, the decision records, and the export — the visitor decides before anyone counts.