Security related headers

As a follow-up to this post Setting Content Security Policy and other security related headers

if you are using a caching plugin then you will need to modify the FilesMatch statement to something like this

<FilesMatch "\.(htm|html|php|gz)$">

I found Recx Security Analyser to be a very useful Chrome extension to check these kinds of headers.