A mulch-yard kiosk pastes a SAS into an http:// link on a chalkboard web page. What distribution practice must the developer follow?
Select an answer to reveal the explanation.
Short Explanation
A SAS in the clear on http:// is basically taping the key to the chalkboard. Mint it and share it only over HTTPS.
Full Explanation
Microsoft guidance requires using HTTPS when creating and distributing SAS tokens because the signature and permissions travel in the URL. Cleartext HTTP exposes the token to interception and replay. This is independent of App Service custom-domain TLS configuration covered in Domain 1 compute hosting.