Incorrect content type headers on https://archive.torproject.org/ (Tails mirror)
Hello,
https://archive.torproject.org/amnesia.boum.org/tails/ is a Tails mirror, and I received the following email from Tails:
Hi,
When serving our USB images (.img) your mirror returns this
combination of HTTP headers:
* `X-Content-Type-Options: nosniff`, which instructs the browser to
not attempt to guess the type of the resource
* no `Content-Type` header
As a result, when one opens the URL to our USB image on your mirror,
it loads as a web page in the browser, instead of being downloaded.
That's not going to work for our users, so I've temporarily disabled
your mirror from our pool.
Could you please fix this? I suppose the simplest fix would be to
return "Content-Type: application/octet-stream" for *.img files.
Cheers!