This article is a written version of the Stefan Judis talk “HTTP headers for the responsible developer” given at JavaScript fwdays'19, a conference for JavaScript developers .