What’s on the HTTP Headers poster
A 8-row table: Header · Direction · Does.
Grouped by what they do.
- Authorization — Request — Carries the credential
- Content-Type — Both — What the body is
- Accept — Request — What the client can handle
- User-Agent — Request — Client identification
- Set-Cookie — Response — Stores a cookie
- Location — Response — Redirect target
- Content-Security-Policy — Response — Restricts what may load
- Strict-Transport-Security — Response — HTTPS only, from now on
CSP is the strongest single defence against XSS, and the fiddliest to deploy. Start in report-only mode.
Questions about the HTTP Headers poster
- What’s on the HTTP Headers poster?
- A 8-row table: Header · Direction · Does. Grouped by what they do. Authorization — Request — Carries the credential; Content-Type — Both — What the body is; Accept — Request — What the client can handle; User-Agent — Request — Client identification; Set-Cookie — Response — Stores a cookie; Location — Response — Redirect target; Content-Security-Policy — Response — Restricts what may load; Strict-Transport-Security — Response — HTTPS only, from now on. CSP is the strongest single defence against XSS, and the fiddliest to deploy. Start in report-only mode.
- Who is the HTTP Headers poster for?
- HTTP Headers belongs to the Computing section rather than to a school year, because computing is not something one grade owns. Anyone learning the web can pin it up — a beginner, a student mid-course, or someone revising years later.
- When should you use the HTTP Headers poster?
- Security headers are the cheapest hardening available. Most are one line each. A wall chart earns its place by being glanceable from where the work is happening, so HTTP Headers belongs on the wall where that computing work actually happens, within glancing distance, rather than filed away.
- What other posters go with HTTP Headers?
- Accessibility, ARIA and How a Browser Renders sit alongside HTTP Headers in the Computing section. Printed together they make a wall rather than a single sheet, which is how a reference set actually gets used.AccessibilityARIAHow a Browser Renders
- Is the HTTP Headers poster free to download and print?
- Yes. HTTP Headers downloads as a free PDF with no account, no email and no watermark, like everything else in the Computing section. Print as many copies as you like for a home, a classroom, a library or a tutoring group; reselling the file is the only thing the licence rules out.Read the licence
- What size does the HTTP Headers poster print at?
- HTTP Headers is a vector PDF laid out for US Letter, and prints on A4 with Fit to page — the same file, no separate download. Because every mark on it is drawn rather than photographed, it stays sharp enlarged to A3, A2 or A1 at a copy shop. Colour carries emphasis only, so a greyscale print of HTTP Headers loses nothing.Printing guide
Related posters
Charts that sit alongside HTTP Headers on the same wall.
Browse every Computing poster, or start from the full catalogue.