CDNs and reverse proxies

Omitting a header from the cache key hands the next visitor someone else's response

Web cache poisoning starts when the origin reads a request field the cache left out of its key, so a response generated for one request gets stored and replayed to everyone asking for that path.