Peter:
- When protectResponse is TRUE, the server MUST protect the response independantly of the protection of the transport.