[whatwg/fetch] CORS protocol and HTTP caches (#402)

The section says

> If CORS protocol requirements are more complicated than setting `Access-Control-Allow-Origin` to * or a static origin, `Vary` is to be used.

Is it saying that we need a `Vary` header if we want to add "Access-Control-Allow-Origin: *" to a response only when an `Origin` header is present on the request?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/402