Vary: Accept-Encoding Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Pragma: no-cache Content-Type: text/html;charset=UTF-8 Connection: keep-alive HTTP/1.1 200 OK Set-Cookie: locale_riffreporter=de; expires=Tue, 13-Mar-2018 04:34:31 GMT; Max-Age=2592000; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Server: nginx X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge,chrome=1 Set-Cookie: session_riffreporter=0a02q7pg6phn1rgouti71jp4d3; expires=Sun, 11-Feb-2018 07:34:31 GMT; Max-Age=10800; path=/; secure; HttpOnly X-Content-Type-Options: nosniff Content-Security-Policy: default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: data: 'self' 'unsafe-inline' 'unsafe-eval' X-Xss-Protection: 1; mode=block Date: Sun, 11 Feb 2018 04:34:35 GMT Transfer-Encoding: chunked Cache-Control: no-store, no-cache, must-revalidate