Remove unnecessary HTTP headers
Prevent clickjacking
Prevent content sniffing (MIME sniffing)
Prevent storage of pages in browsers