diff --git a/.htaccess b/.htaccess
index 0502ad2..78f993b 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
-Header set Content-Security-Policy "default-src *; script-src 'self' ajax.googleapis.com code.jquery.com; style-src 'self'"
-Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
-# Header set X-Frame-Options "sameorigin"
-Header set X-XSS-Protection "1; mode=block"
-Header set X-Content-Type-Options "nosniff"
+# http://serverfault.com/a/100340
+AddType image/x-icon .ico
+ExpiresActive On
+ExpiresByType image/x-icon "access plus 1 month"
+ExpiresByType image/png "access plus 1 month"