RequestHeader set X-HTTPS 1 Header set Referrer-Policy "no-referrer-when-downgrade" RequestReadTimeout header=20-40,MinRate=500 body=20-40,MinRate=500 Header set X-XSS-Protection "1; mode=block" Header set X-Content-Type-Options nosniff