Security and Caching settings for web.config in ASP.NET

web.config.xml

<system.web>
  <httpCookies requireSSL="true" />
</system.web>

<system.webServer>
  <httpProtocol>
    <customHeaders>
      <add name="Strict-Transport-Security" value="max-age=31536000"/>
      <add name="X-XSS-Protection" value="1; mode=block"/>
      <add name="X-Content-Type-Options" value="nosniff"/>
    </customHeaders>
  </httpProtocol>
  <staticContent>
    <remove fileExtension=".js.map" />
    <mimeMap fileExtension=".js.map" mimeType="application/json" />
    <clientCache cacheControlMode="UseMaxAge" cacheControlMaxAge="1000.00:00:00" />
  </staticContent>
</system.webServer>