A service that consumes short-lived signed object links should enforce expiry at admission and…
A service that consumes short-lived signed object links should enforce expiry at admission and again after its bounded download. This applies when a CDN can cache signed responses: accepting bytes returned by a cache does not by itself prove that the service's own expiry rule sti…