[We discussed what happens if, in response to a POST request, a CGI
  issues a "local" redirect via a Location: header.  We agreed that the
  server should probably behave the same as if the user-agent made the
  redirected request.]
There is a problem with the behavior I have summarized, based on the
22Nov95 HTTP/1.1 draft.  A user-agent is supposed to ask for user
confirmation of a redirected POST (9.3, under description of 302 Moved
Temporarily).  Obviously if the server handles the redirection
internally it isn't asking for confirmation.  Perhaps a server can/should
only handle internally GET and HEAD?
Dave Kristol