HTTP/2 200 x-gu-dotcomponents: true onion-location: https://www.guardian2zotagl6tmjucg3lrhxdk4dw3lhbqnkvvkywawy3oqfoprid.onion/tone/blog x-gu-frontend-git-commit-id: 1b2c27de31f207addc16764821ed08cd1aff3ac9 link: ; rel=prefetch,; rel=prefetch,; rel=prefetch,; rel=prefetch,,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect,; rel=preconnect content-type: text/html; charset=UTF-8 etag: W/"hash-1197469454457048866" accept-ranges: bytes date: Sun, 19 Jul 2026 06:39:18 GMT x-robots-tag: bingbot: noarchive set-cookie: gu_client_ab_tests=webx-monitor-group-contamination:control,feast-recipe-nudge-v2:variant-1,growth-auxia-banner:variant; path=/; max-age=2592000 set-cookie: gu_v2_mvt_id=587; path=/; max-age=7776000 set-cookie: GU_mvt_id=390657; expires=Sat, 17 Oct 2026 06:39:18 GMT; path=/; domain=.theguardian.com; Secure x-timer: S1784443159.780537,VS0,VE194 strict-transport-security: max-age=63072000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff content-security-policy: upgrade-insecure-requests; default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob: 'unsafe-inline'; frame-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src 'self' https://assets.guim.co.uk https://pasteup.guim.co.uk https://interactive.guim.co.uk https://dashboard.ophan.co.uk https://cdn.braze.eu data:; connect-src https: wss: blob:; child-src https: blob:; object-src 'none'; base-uri 'none' referrer-policy: no-referrer-when-downgrade feature-policy: camera 'none'; microphone 'none'; midi 'none'; geolocation 'none' permissions-policy: camera=(), microphone=(), midi=(), geolocation=(), interest-cohort=(), clipboard-read=(), unload=() x-gu-edition: us cache-control: max-age=60, stale-while-revalidate=6, stale-if-error=864000, private age: 0 x-request-id: 0ab012ce-89e6-4475-9ecf-fe784044bee3 vary: Accept-Encoding,User-Agent set-cookie: GU_geo_country=US; path=/; Secure alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 427757