- https://github.com/simonmkwii/HACDN
- https://www.reddit.com/r/SwitchHacks/comments/759myu/the_eshop_and_cdn_explained_switch_edition/
- https://github.com/Reisyukaku/CDNX
- https://pastebin.com/pi0UjW9J
- https://gbatemp.net/threads/shoguntool-get-game-information-from-title-ids.503340/
- https://github.com/reswitched/HacVersionListBot/tree/master/HacVersionListBot/HacVersionListBot
- https://gist.github.com/socraticbliss/4410790b6e5a27161f521c45d1eb2684
Official software sends a HEAD request to /<titleid>/<version> to get the NCA-ID from the X-Nintendo-Content-ID response header.
All actual content downloading proceeds through the /<ncaid> endpoint -- and the access pattern there is distinguishable.
And whether or not people would be comfortable, by not providing the option you guarantee their requests are distinguishable from those made by official software.