I discussed this with Andy. His feel was that the current behavior is RESTful. The alternative is that the GET returns a URL in the body which is a bit odd because the body should contain the resource you have got. If a client just wants the URL of the resource, they are perfectly able to not follow redirects.