Thank you, that makes sense. So presigned URLs that use auth header are fine (We use those extensively in Peergos, as presigned with an auth query parameter is

Thank you, that makes sense. So presigned URLs that use auth header are fine (We use those extensively in Peergos, as presigned with an auth query parameter isn't cached by browsers as the query string will change with subsequent requests).