Ask HN: Direct Server Response is a cure for DDoS. Why is it not used?