

It makes me think that they’re sufficiently poorly designed that it’s treating the reset as a temporary communication issue. I wonder if you could use this to their detriment by configurating the server to silently drop the connection rather than RSTing it. From your server’s side it should look fairly similar, but from their side they actually have to spend the time putting together and sending the HTTP request before getting shut down.
The accountability sink backfires since in order to sell this they have to acknowledge how much of a role they play in the process, rather than being simply a platform that connects applicants to openings and doesn’t make decisions.