HTTP/2 200 date: Sun, 18 Jan 2026 20:01:35 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding server: Mastodon x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: strict-origin-when-cross-origin vary: Accept, Accept-Language, Cookie, Origin cache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=3600 etag: W/"94d7060f12fa91b79a3c9dfdb494e264" content-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://mathstodon.xyz; img-src 'self' data: blob: https://mathstodon.xyz https://media.mathstodon.xyz; media-src 'self' data: https://mathstodon.xyz https://media.mathstodon.xyz; manifest-src 'self' https://mathstodon.xyz; form-action 'none'; child-src 'self' blob: https://mathstodon.xyz; worker-src 'self' blob: https://mathstodon.xyz; connect-src 'self' data: blob: https://mathstodon.xyz https://media.mathstodon.xyz wss://mathstodon.xyz; script-src 'self' https://mathstodon.xyz 'unsafe-eval'; style-src 'self' https://mathstodon.xyz 'nonce-xa9Lw9WuYgpHCTWF88ekVg=='; frame-src 'self' https: x-request-id: 9f8f745b-7f91-4781-ad13-46f6d3d217d8 x-runtime: 0.009520 strict-transport-security: max-age=63072000; includeSubDomains x-cached: MISS content-encoding: gzip