HTTP Security and Privacy Headers of Encrypted Cloud Storage Services (2026)

A reproducible point-in-time dataset (2026-07-18) of HTTP security and privacy headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP) measured on the front domains of 17 consumer and encrypted cloud storage services. Measured with curl following redirects; fully reproducible, no fabricated values. Front-domain transport headers only, not an assessment of the services encryption or zero-knowledge claims. Compiled by Priviy. Related analysis: priviy.com cloud storage comparison and the client-side metadata viewer tool.