One more fact: If I also don’t use the DPoP header with resource requests to https://crspybits.solidcommunity.net/ it fails. It seems a difference between CSS and ESS is that CSS needs the DPoP proof where ESS doesn’t.
One more fact: If I also don’t use the DPoP header with resource requests to https://crspybits.solidcommunity.net/ it fails. It seems a difference between CSS and ESS is that CSS needs the DPoP proof where ESS doesn’t.