diff --git a/doc/bugs/S3_remote_errors_with_garage_endpoint/comment_7_131eb46d499d29b124c576653796e270._comment b/doc/bugs/S3_remote_errors_with_garage_endpoint/comment_7_131eb46d499d29b124c576653796e270._comment
new file mode 100644
index 0000000000..6be643bda8
--- /dev/null
+++ b/doc/bugs/S3_remote_errors_with_garage_endpoint/comment_7_131eb46d499d29b124c576653796e270._comment
@@ -0,0 +1,16 @@
+[[!comment format=mdwn
+ username="jpds"
+ avatar="http://cdn.libravatar.org/avatar/24d746ec6a7726b162c12ecceb3ee267"
+ subject="comment 7"
+ date="2023-02-02T15:53:34Z"
+ content="""
+> s3ExtractRegion parses a hostname like \"s3-foo.amazonaws.com\" to \"foo\", and that is used as the region (or \"scope\" as you've called it).
+
+I'd also like to clarify this bit in that what I mean by \"scope\" is that line in the error message from the backend:
+
+```
+s3ErrorMessage = \"Authorization header malformed, expected scope: 20230118/my-s3-endpoint.domain.com/s3/aws4_request\"
+```
+
+git-annex is incorrectly setting the FQDN/endpoint of the service in this, instead of what garage and the linked Haskell library want here after the date which is the region.
+"""]]