steveloughran commented on PR #15428:
URL: https://github.com/apache/iceberg/pull/15428#issuecomment-3986566667

   Thinking about how best to do this
   
   * cached request should only include the signed values; the rest jitter 
between irrelevant (referrer) to dangerous (if-modified)
   * the list of headers *known* to be signed can be fixed, (current PR), but 
that's too brittle.
   * Best to parse the signature, get the list of signed headers from there, 
and discard the rest.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to