Proton.me - Pass.proton.me

accept-ranges: bytes
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-length: 1493
content-type: text/html; charset=UTF-8
date: Mon, 01 Sep 2025 14:43:23 GMT
expires: Wed, 11 Jan 1984 05:00:00 GMT
last-modified: Thu, 28 Aug 2025 17:17:10 GMT
pragma: no-cache
set-cookie: Session-Id=aLWxCzNDhLB_CPTBMXqEkwAAAA4; Domain=proton.me; Path=/; HttpOnly; SameSite=None; Secure; Max-Age=7776000
set-cookie: Tag=default; Path=/; SameSite=None; Secure; Max-Age=7776000
vary: Accept-Encoding
content-security-policy: default-src 'self'; connect-src 'self' blob:; script-src 'self' 'wasm-unsafe-eval' blob: 'sha256-eAhF1Kdccp0BTXM6nMW7SYBdV0c3fZwzcC177TQ692g='; style-src 'self' 'unsafe-inline'; img-src http: https: data: blob: cid:; frame-src 'self' blob: https://account.proton.me https://verify.proton.me https://mail.proton.me https://drive.proton.me; object-src 'self' blob:; child-src 'self' data: blob:; report-uri https://reports.proton.me/reports/csp; frame-ancestors https://mail.proton.me https://drive.proton.me;
public-key-pins-report-only: pin-sha256="CT56BhOTmj5ZIPgb/xD5mH8rY3BLo/MlhP7oPyJUEDo="; pin-sha256="35Dx28/uzN3LeltkCBQ8RHK0tlNSa2kCpCRGNp34Gxc="; report-uri="https://reports.proton.me/reports/tls"
onion-location: https://pass.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
strict-transport-security: max-age=31536000; includeSubDomains; preload
expect-ct: max-age=2592000, enforce, report-uri="https://reports.proton.me/reports/tls"
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none