> In an ideal world, maybe. In practice, it triggered a huge amount of retries on failed requests from poorly coded scripts, effectively creating a DDoS I had

> In an ideal world, maybe. In practice, it triggered a huge amount of retries on failed requests from poorly coded scripts, effectively creating a DDoS I had this happen in production with a client once. Their backend uses a service of ours, and makes roughly ~20mil requests/month. We had an outage of about 15 minutes, and their systems ramped up to make over 40mil requests in this time. At the end of the month, they tried emailing me that the service had 66% downtime, because their logs showed 20mil 200-Ok and 40mil 500-Errors responses.