I've seen a lot of these headers on traffic that has no business having these headers (internal app traffic to a non-public-facing server) EDIT: On the one ser

I've seen a lot of these headers on traffic that has no business having these headers (internal app traffic to a non-public-facing server) EDIT: On the one server I sampled, they're included in approx. 10% of requests (mostly Android/iOS traffic)