Thanks Jörg for the answer
I am clear with points #2 & #3. That makes sense.
For #1 can you explain bit more in it. You mentioned there might be scenarios in which we may set the headers through code. But that is contradictory to our scenario where we are setting it through OSGI configs.
So it looks there are 3 ways to set the headers(at least) :
1. Through code - Scenario when there is a specific business logic and we need to set through code
2. Through Dispatcher - Most common scenario when headers are set on web server level only when there is no specific business logic
3. Through OSGI configs - Not sure yet. Can you help give a scenario?
Thanks,
Ganesh