It's also relevant to authenticated GET requests. See also: how VSSPS, ARM do it.