Resource requests to the Enterprise Solid Server: Getting 400, Bad Request

One more fact: If I also don’t use the DPoP header with resource requests to https://crspybits.solidcommunity.net/ it fails. It seems a difference between CSS and ESS is that CSS needs the DPoP proof where ESS doesn’t.