@taylan
Well the mutual understanding between the server and client is that there's only one true signature for each request, so it makes sense to allow only uppercase percentage encoding when transforming the request to a string to be hmac-sha1'd