I made a tweet earlier claiming `HttpService:RequestAsync` quietly discards the `Authorization` header if you use…

I made a tweet earlier claiming `HttpService:RequestAsync` quietly discards the `Authorization` header if you use a `string` instead of the `Secret` datatype in live game servers. I appear to have been mistaken, it was actually a DDoS prot
Ranked #77 on backlist 2026-06-03 (03 Jun 2026 UTC) · by (Max ¯\_(ツ)_/¯) ·

How it ranks: Backlist reads my Twitter/X timeline, scores every tweet for substance with an LLM rubric (not engagement), and publishes the daily top picks with a one-line takeaway. Curated by Surya Dantuluri.