http,http-headers,vary
Both are valid (and mean the same thing). And no, the W3C isn't relevant here. You will need to look into the IETF RFCs 7230 and 7231....