Curl HTTP Headers / HTTP2

facebook

fike@corellia:~$ curl -s -D - -o /dev/null -H "Accept-Encoding: br" https://www.facebook.com/
HTTP/2.0 200
p3p:CP="Facebook does not have a P3P policy. Learn why here: http://fb.me/p3p"
strict-transport-security:max-age=15552000; preload
cache-control:private, no-cache, no-store, must-revalidate
expires:Sat, 01 Jan 2000 00:00:00 GMT
pragma:no-cache
public-key-pins-report-only:max-age=500; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
x-content-type-options:nosniff
x-xss-protection:0
x-frame-options:DENY
set-cookie:fr=0gu3k52R2GAZK1fIi..BXmSM5.IZ.AAA.0.0.BXmSM5.AWU5YPKb; expires=Tue, 25-Oct-2016 21:10:17 GMT; Max-Age=7776000; path=/; domain=.facebook.com; httponly
vary:Accept-Encoding
content-encoding:br
content-type:text/html
x-fb-debug:fUPpNhqI6kXT95EBHphT2hZ5Yq+DYJb47P6JY2KRVP2zIG68duz1wkP6YgFXUpnfFixE848fi20I3uEkqBxRCQ==
date:Wed, 27 Jul 2016 21:10:17 GMT

google

fike@corellia:~$ curl -s -D - -o /dev/null -H "Accept-Encoding: br" https://www.google.com/
HTTP/2.0 200
date:Wed, 27 Jul 2016 21:18:12 GMT
expires:-1
cache-control:private, max-age=0
content-type:text/html; charset=ISO-8859-1
p3p:CP="This is not a P3P policy! See https://www.google.com/support/accounts/answer/151657?hl=en for more info."
server:gws
x-xss-protection:1; mode=block
x-frame-options:SAMEORIGIN
set-cookie:NID=83=dmOM_8IsMJOkxmyxRi29NcSLEiJSVe36GBQ7xclx7gUJAhUTWGEyFqeaTvsn2wokzNXxHITgC5JbJobLJTJgPoPogzSmMwGLcFMeXena6HU0JF7c3FVa75PBVs_55bXFdhCApq5rJHfO6g; expires=Thu, 26-Jan-2017 21:18:12 GMT; path=/; domain=.google.com; HttpOnly
alternate-protocol:443:quic
alt-svc:quic=":443"; ma=2592000; v="36,35,34,33,32,31,30,29,28,27,26,25"
accept-ranges:none
vary:Accept-Encoding

twitter

fike@corellia:~$ curl -s -D - -o /dev/null -H "Accept-Encoding: br" https://twitter.com/
HTTP/2.0 200
cache-control:no-cache, no-store, must-revalidate, pre-check=0, post-check=0
content-encoding:gzip
content-length:28786
content-type:text/html;charset=utf-8
date:Wed, 27 Jul 2016 21:16:49 GMT
expires:Tue, 31 Mar 1981 05:00:00 GMT
last-modified:Wed, 27 Jul 2016 21:16:49 GMT
pragma:no-cache
server:tsa_a
set-cookie:fm=0; Expires=Wed, 27 Jul 2016 21:16:39 GMT; Path=/; Domain=.twitter.com; Secure; HTTPOnly
set-cookie:_twitter_sess=BAh7CSIKZmxhc2hJQzonQWN0aW9uQ29udHJvbGxlcjo6Rmxhc2g6OkZsYXNo%250ASGFzaHsABjoKQHVzZWR7ADoPY3JlYXRlZF9hdGwrCJeRNy5WAToMY3NyZl9p%250AZCIlOTA3YmM4ZTViYmZhZjAwMjUyNmM1ZDM5YWMzMzc2NTM6B2lkIiU0YjUy%250AZGZkZWJjZWFlNGNjNjRjMzI3MmM1MzJhNDc0MA%253D%253D--779714e7b7860ea9cc9c8b1a5a5cf5d8df507897; Path=/; Domain=.twitter.com; Secure; HTTPOnly
set-cookie:guest_id=v1%3A146965420891814833; Domain=.twitter.com; Path=/; Expires=Fri, 27-Jul-2018 21:16:49 UTC
status:200 OK
strict-transport-security:max-age=631138519
x-connection-hash:4df1b63218242751cbb22f01f5d00119
x-content-type-options:nosniff
x-frame-options:SAMEORIGIN
x-response-time:210
x-transaction:00a24a1900106998
x-twitter-response-tags:BouncerCompliant
x-ua-compatible:IE=edge,chrome=1
x-xss-protection:1; mode=block