g1smd - 2:27 am on Jun 18, 2011 (gmt 0)

Anyone with access to the packets on the way from your site to the end user, browser, or bot can potentially change the headers.

Here's an easy way for proxies to "make documents their own", by pointing the HTTP rel=canonical header to their own proxy-based "virtual URL" for the document.