NIP-05 requires this header so browser-based Nostr clients can validate identities via fetch from any origin.