Our [template](https://github.com/JanssenProject/jans/blob/main/jans-linux-setup/jans_setup/templates/apache/https_jans.conf) has a couple of deprecated directives: - X-XSS-Protection header - see https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection - `SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0` - a hack for Internet Explorer issues) I think it is safe to remove.