Add some text to call out explicitly that an HTTP redirect can happen:
301 moved permanently
307 temporary redirect
Explain how this can be used to address the privacy concern regarding the WAN-based bootstrap hosting service having access to more information than necessary. The absolute minimum is to simply redirect requests somewhere else. In which case the only customer-provided data would be the redirect location (e.g., url, hostname, or an IP-address).
Add some text to call out explicitly that an HTTP redirect can happen:
Explain how this can be used to address the privacy concern regarding the WAN-based bootstrap hosting service having access to more information than necessary. The absolute minimum is to simply redirect requests somewhere else. In which case the only customer-provided data would be the redirect location (e.g., url, hostname, or an IP-address).