1. Caching set cookies Caching an object with a Set-Cookie header can have devastating effects, as any client requesting the object will get that same cookie set. This can potentially lead to a session transfer. In general we recommend avoiding the use of return (deliver) in vcl_fetch, to stay safe against this. If you really do need a return (deliver), be careful and check for the presence of Set
![10 Varnish Cache mistakes and how to avoid them](https://cdn-ak-scissors.b.st-hatena.com/image/square/0abf9afb6ed3170cce91a0fcba0c2f1e95533887/height=288;version=1;width=512/https%3A%2F%2Finfo.varnish-software.com%2Fhubfs%2Fphoto-1442406964439-e46ab8eff7c4.jpeg)