We don't log all headers. By default, we don't log headers that are likely to contain credentials (Cookie, Set-Cookie, Authorization, Proxy-Authorization): http

We don't log all headers. By default, we don't log headers that are likely to contain credentials (Cookie, Set-Cookie, Authorization, Proxy-Authorization): https://github.com/caddyserver/caddy/blob/a8cc5d1a7d9d80e12ab895beaf4eaed34cc6bded/modules/caddyhttp/marshalers.go#L68-L81 https://github.com/caddyserver/caddy/blob/a8cc5d1a7d9d80e12a...