X-UA-Compatible: IE=edge, Chrome=1 Content-Type: text/html; charset=utf-8 Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://getpocket.com https://developers.500px.com https://*.developers.500px.com https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://*.lightstep.com https://app.zencoder.com 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self'; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com X-Obvious-Tid: 1494508021276:dc42acc8e836 X-Content-Type-Options: nosniff Expires: Thu, 09 Sep 1999 09:09:09 GMT Set-Cookie: uid=lo_8f12d4bd9e44; path=/; expires=Fri, 11 May 2018 13:07:01 GMT; secure; httponly HTTP/1.1 200 OK Pragma: no-cache Connection: keep-alive Tk: T Server: openresty X-Frame-Options: sameorigin Date: Thu, 11 May 2017 13:07:01 GMT X-Powered-By: Medium Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 123083 Link: <https://medium.com/humans.txt>; rel="humans" X-XSS-Protection: 1; mode=block X-Obvious-Info: 28929-e57c6b3,e57c6b3 Set-Cookie: sid=1:soUVP9dvjNu8ZFg9w17IWoZKvUgN5/FnzKis8FQzp5pI+eWqcoaQFuvvBRK/6363; path=/; expires=Fri, 11 May 2018 13:07:01 GMT; secure; httponly