I've totally copied php http headers into non-php backends just to see what happens. It costs nothing and gets a trifle more security.

(Not really but it makes me giggle at least)