jarema.me

HTML metadata

Title

Jarema's digital garden

Description

This site is the personal playground and digital garden for Jarema. I write some blog posts, sometimes content about economics, coding, and occasionally I post some cats too.

Language

en

Generator

Astro v6.3.1

Canonical

https://jarema.me/

Translations

da
en
et
fi
pl
ru
sv
tr
vi
zh

Feeds

Jarema's digital garden - RSS Feed RSS
Jarema's digital garden - Atom Feed Atom
RSS Feed - EN RSS
Atom Feed - EN Atom
RSS Feed - VI RSS
Atom Feed - VI Atom
RSS Feed - RU RSS
Atom Feed - RU Atom
RSS Feed - ET RSS
Atom Feed - ET Atom
RSS Feed - DA RSS
Atom Feed - DA Atom
RSS Feed - ZH RSS
Atom Feed - ZH Atom
RSS Feed - TR RSS
Atom Feed - TR Atom
RSS Feed - PL RSS
Atom Feed - PL Atom
RSS Feed - SV RSS
Atom Feed - SV Atom
RSS Feed - FI RSS
Atom Feed - FI Atom

Open Graph

url: https://jarema.me/
title: Jarema's digital garden
locale: en_US
site name: Jarema's digital garden
description: This site is the personal playground and digital garden for Jarema. I write some blog posts, sometimes content about economics, coding, and occasionally I post some cats too.

Technology

CDN: Cloudflare

Third-party hosts loaded (9)

webmention.io×2
aperture.p3k.io×1
codeberg.org×1
github.com×1
indieauth.com×1
lastfm.freetls.fastly.net×1
moods.imood.com×1
pronouns.page×1
tokens.indieauth.com×1

Social

DNS records live

NS

daphne.ns.cloudflare.com
margo.ns.cloudflare.com

MX

Show 6 MX records

100 mailsec.protonmail.ch
1000 mail.jarema.me
20 mx.zoho.com
30 mx2.zoho.com
50 mx3.zoho.com
80 mail.protonmail.ch

TXT

google-site-verification=dnLQBMfRJxHiE6DeYB2woUOj3E6bcWK9sWRUI_6gQ_Q
keybase-site-verification=25WJWWOH20vlPFD__hMxCAJtQTySCL3SKlTGHEurkug

Email authentication strong

SPF: v=spf1 include:_spf.protonmail.ch include:zoho.com mx ra=postmaster -all
strict (-all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:2fba68616b6c4be3ad37605a152dfb52@dmarc-reports.cloudflare.net,mailto:postmaster@jarema.me; ruf=mailto:postmaster@jarema.me; sp=none; adkim=r; aspf=r; rf=afrf; pct=100
policy: quarantine · sp=none
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-17 to 2026-07-16

Expires in 57 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://jarema.me/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: strict-origin
permissions-policy: interest-cohort=(), browsing-topics=(), camera=(), microphone=(), geolocation=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; connect-src 'self' jarema.me ws.audioscrobbler.com api-gateway.umami.dev cloud.umami.is status.cafe; font-src 'self'; frame-src jarema.atabook.org; img-src 'self' *.ytimg.com *.rcd.gg *.googleusercontent.com moods.imood.com lastfm.freetls.fastly.net; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline' vercel.live; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https: geekring.net kagi.com; upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin