Currently I have it where google isn't supposed to index images on my site, and for every image request, regardless of who initiates it, the HTTP response header contains:
X-Robots-Tag: noindex, noimageindex
Yet, according to my server logs, the entire image contents are still served.
Because I don't want the image to be indexed in search engines, is it acceptable to deliberately strip all headers except for the date and the x-robots-tag header and only send that to google with nothing else?
I just don't want google to suck up tons of unnecessary bandwidth, and at the same time, I don't want to be flagged by google for making cloaking happen.