Checks

Alternative service advertised

Alt-Svc is present but does not advertise HTTP/3.

Why it matters

The header names another way to reach the origin. It is informational.

What to do

No change is required unless the advertised endpoint is unintended.

Reference

Security response headers reduce XSS, clickjacking, and protocol downgrade risk.

OWASP Secure Headers Project