We need a per-connection or per-host mechanism for Access-Control-Allow-Headers

[alficles]

This will require standards work within the W3C to define and adoption from browsers for implementation. It's not a short process, but it's something the Internet could benefit from and this specification in particular. A broader permission grant could pave the way for a more efficient v2 of this specification.

This is an action item coming out of the conversation in #33.