To clarify, by 'illegal' I meant non-compliant.

These headers _are_ used, as we have run into them in production in our business coming from clients, and some time on stack overflow shows these are becoming more and more common. They are also RFC-compliant, and competing products support them.