Blob Downloads from Content Servers are verified for a valid login session on each call. With the new configuration option cap.server.blob-download-session-validation, this session validation can be disabled. The default for the option is true, that is, each download request is verified for a valid login session. If set to false, the session validation for downloads is disabled. This is useful on Replication Live Servers to allow for load-balanced blob download. It must only be set to false if corresponding servers are appropriately secured by firewalls, private networks, or the like. Otherwise, public unsecured read access to blobs could be possible. Blob Uploads are always secured by session validation, regardless of the option’s setting.