ByteTools

HTTP headers

Follow the redirect chain, see response headers and timing, and grade the security headers.

Frequently asked questions

What is the difference between 301, 302, 307 and 308?

301 and 308 are permanent redirects; search engines move ranking to the new URL. 302 and 307 are temporary. 307 and 308 also keep the request method, so a POST stays a POST.

Which security headers matter most?

Strict-Transport-Security forces HTTPS, Content-Security-Policy limits where scripts can load from, and X-Content-Type-Options stops MIME sniffing. Referrer-Policy and Permissions-Policy add privacy controls.

Why is the first byte slow?

Time to first byte is server processing time plus one round trip. If DNS, connect and TLS are fast but TTFB is high, the application or database is the bottleneck.

Tools