UNESCO publishes an llms.txt for AI tools, sets a content security policy, and limits framing to itself. But no page analyzed sends Strict-Transport-Security, and http:// moves to https with a temporary 302.The lesson for every team: Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301.One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict. How the review works, step by step: carlosandmunoz.com/qa-review-guide.html#WebSecurity #HSTS #HTTPS #QA #QAlab
UNESCO has llms.txt, but no HSTS.
UNESCO publishes an llms.txt for AI tools, sets a content security policy, and limits framing to itself. But no page analyzed sends Strict-Transport-Security, and http:// moves to https with a temporary 302.
The lesson for every team: Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
How the review works, step by step: https://carlosandmunoz.com/qa-review-guide.html?utm_source=linkedin&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=unesco
#WebSecurity #HSTS #HTTPS #QA #QAlab
X
UNESCO has llms.txt, but no HSTS.
Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301.
carlosandmunoz.com/qa-review-guide?utm_source=x&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=unesco
#WebSecurity #QAlab
Instagram
UNESCO has llms.txt, but no HSTS.
UNESCO publishes an llms.txt for AI tools, sets a content security policy, and limits framing to itself. But no page analyzed sends Strict-Transport-Security, and http:// moves to https with a temporary 302.
Lesson: Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
Guide: link in bio.
#WebSecurity #HSTS #HTTPS #QA #WebDev #QAlab
Facebook
UNESCO has llms.txt, but no HSTS.
UNESCO publishes an llms.txt for AI tools, sets a content security policy, and limits framing to itself. But no page analyzed sends Strict-Transport-Security, and http:// moves to https with a temporary 302.
Lesson: Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
https://carlosandmunoz.com/qa-review-guide.html?utm_source=facebook&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=unesco
#QAlab
TikTok
UNESCO has llms.txt, but no HSTS. Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301. #WebSecurity #HSTS #HTTPS #QA #techtok #QAlab
YouTube
UNESCO publishes an llms.txt for AI tools, sets a content security policy, and limits framing to itself. But no page analyzed sends Strict-Transport-Security, and http:// moves to https with a temporary 302.
Lesson: Send Strict-Transport-Security with a max-age of a year or more, and make the http-to-https hop a 301.
One automated analysis of public pages on 19 Oct 2026. A starting point, not a verdict.
Guide: https://carlosandmunoz.com/qa-review-guide.html?utm_source=youtube&utm_medium=social&utm_campaign=runs-100-2026-11&utm_content=unesco
Real runs · QA-lab URL Review
