Checks

HTTP/3 advertised

Alt-Svc advertises HTTP/3 (h3).

Why it matters

Clients that support it can switch to HTTP/3. This is informational, not a vulnerability.

What to do

No change is required.

Reference

Security response headers reduce XSS, clickjacking, and protocol downgrade risk.

OWASP Secure Headers Project