Our current xvo on enwiki is:
X-Vary-Options: Accept-Encoding;list-contains=gzip,X-WAP,Cookie;string-contains=enwikiToken;string-contains=enwikiLoggedOut;string-contains=enwiki_session;string-contains=centralauth_Token;string-contains=centralauth_Session;string-contains=centralauth_LoggedOut;string-contains=mf_useformat,X-CS,X-Subdomain,X-Images
Note that it requests Accept-Encoding to vary on presence of X-WAP and Cookie on X-CS,X-Subdomain,X-Images:P While it's harmless, it shouldn't be here.
Version: unspecified
Severity: normal