根据default.settings.php中的文档,我在其他地方也看到过类似的描述, "Without "Vary:Cookie", authenticated users would also be served the anonymous page from the cache."
但是$conf['omit_vary_cookie'] = TRUE;
,建议在Drupal 7中与Varnish一起使用,似乎并不能阻止用户从匿名会话切换到经过身份验证的会话。这是Varnish实际不关心的标头吗?