Hacker News Reader

The Twilio API includes a X-Shenanigans header on every request, always set to "none", of course :)

they even cared to use a proper X-<> "custom header", respecting the rfc heh. Nice.

That pattern was deprecated 7 years ago https://tools.ietf.org/html/rfc6648

X- should not be used. Just name your custom header keys something reasonable ovoid conflict with established standards.

X-Ice-Cream: true

Should just be:

Ice-Cream: true