HTTP/2 200 date: Mon, 29 Dec 2025 20:32:41 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: strict-origin-when-cross-origin vary: Accept, Accept-Language, Cookie cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400 etag: W/"bc96ea242fd8d852fc9254ea79c59cbf" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://defcon.social; img-src 'self' data: blob: https://defcon.social https://files.defcon.social; media-src 'self' data: https://defcon.social https://files.defcon.social; manifest-src 'self' https://defcon.social; form-action 'none'; child-src 'self' blob: https://defcon.social; worker-src 'self' blob: https://defcon.social; connect-src 'self' data: blob: https://defcon.social https://files.defcon.social wss://defcon.social; script-src 'self' https://defcon.social 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://defcon.social 'nonce-zmriQIw2PJqWGorQOJ/Huw==' x-request-id: 1e2f1f22-d57e-40a7-9703-023454bec210 x-runtime: 0.023210 strict-transport-security: max-age=63072000; includeSubDomains x-cached: EXPIRED onion-location: https://zpj4sjt4a5ah53s34utu2xhs7owdmgknc3xzvv6chpiodw5rdknkzbid.onion/ content-encoding: gzip