There are 2 places where headers are being added. IIS and your ASP.NET or WCF, etc app side.

Not sure about the visual studio builtin webserver, but yeah that won't be used in production anyway, so why bother ?
You can also configure your web project in visual studio to use locall IIS or IISExpress instead of VS bultin. ( see properties / web tab )
And you can remove the IIS side headers from IIS admin GUI.

As per ASP.NET, you can hook into PreSendRequestHeaders event handler and see whats there and remove if you would like to. 
Similar in WCF, you have the option to remove response headers but different way ( message interceptor ).

C#.NET - IIS Server issues and removing HTTP response headers
Why are the walls in my architectural renders sloping and how do I fix this?


