It often does, and if not, the above approach is to inform your client of the failure so it can switch to using POST or whatever else is best. Edit: As I menti

It often does, and if not, the above approach is to inform your client of the failure so it can switch to using POST or whatever else is best. Edit: As I mentioned on another follow up, you may need to vary on your checksum header to play nice with proxy caches, etc. Or mark your responses as uncachable.