Should aiohttp-cors add a Vary: Origin when emitting a access-control-allow-origin?

[JulienPalard]

When aiohttp-cors writes an header like Access-Control-Allow-Origin, with the Origin request Header, I think it shoul also emit a Vary: Origin (because the response vary according to the Origin). What do you think?

[JulienPalard]

Also see : https://fetch.spec.whatwg.org/#cors-protocol-and-http-caches