via wpjohnny.com => original post link
What are security headers and how do they protect your site?
Literally…WTF is a security header?What do they really protect anyway? (servers? sites? users?)What do they do?How do you use them?Which ones should you actually worry about?
I’ll explain in technical as well as non-technical terms.