HTTPS and HSTS
Production traffic is HTTPS-only with strict transport security enabled.
Production traffic is HTTPS-only with strict transport security enabled.
Security headers restrict framing, object embeds, cross-origin behavior, and unnecessary permissions.
The native app shell only needs internet access for the production resume builder.