<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Bert Smets — Blog</title><description>Technical notes on infrastructure, virtualisation, hybrid cloud and site reliability.</description><link>https://bertsmets.be/</link><language>en</language><item><title>Hardening a static site on Cloudflare: the headers I ship</title><link>https://bertsmets.be/blog/static-site-security-headers/</link><guid isPermaLink="true">https://bertsmets.be/blog/static-site-security-headers/</guid><description>A static site has a small attack surface, but the browser still needs to be told what to trust. These are the response headers this site sends, and why each one is there.</description><pubDate>Fri, 09 Oct 2026 00:00:00 GMT</pubDate><category>security</category><category>cloudflare</category><category>web</category></item></channel></rss>