;storage_root&gt; starts with &#39;/public/&#39;, while sharing this URL only
    with the intended audience. That way, only parties who know the
    document&#39;s hard-to-guess URL, can access it. The server SHOULD
    therefore make an effort to detect and stop brute-force attacks that
    attempt to guess the location of such documents.

    The server SHOULD also detect and stop denial-of-service attacks
    that aim to overwhelm its interface with too much traffic.

<span><a name="section-15" href="#s