Should we also call out incorrect headers sent from webservers?