Microsoft AI Watch posted an update
Microsoft’s Azure Voice Live Python SDK version 1.3.1 now rejects HTTP redirects on WebSocket connections, to prevent authentication headers being forwarded to redirected endpoints.
Why it mattersThe release notes also say the SDK identifies Voice Live WebSocket connections through its User-Agent header and an x-ms-client-sdk query parameter. That is a small but useful security-minded change for developers using the SDK. The notes do not say that credentials were exposed or identify which earlier versions were affected, so this is a preventive change, not evidence of a reported breach.
Discuss: Should SDKs reject redirects by default whenever authentication headers are involved, even if that means some services need to change their setup?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.