Areas / HTTP & Web

HTTP & Web

The web: HTTP, URIs, WebSockets and friends.

195 RFCs · 195 with ISO Plain Language · 0 summaries · 0 index pages

With ISO Plain Language 195

RFC 9110 HTTP Semantics HTTP Semantics The unified specification of HTTP semantics for all protocol versions RFC 9112 HTTP/1.1 HTTP/1.1 How a web request and its response are written down, framed and carried over a connection. RFC 9111 HTTP Caching HTTP Caching The rules for storing HTTP responses, deciding when they are fresh, and checking them with the origin server. RFC 7480 RDAP over HTTP HTTP Usage in the Registration Data Access Protocol (RDAP) The HTTP request and response rules used by the Registration Data Access Protocol. RFC 4918 WebDAV HTTP Extensions for Web Distributed Authoring and Versioning (WebDAV) HTTP methods and rules for changing Web resources, organizing collections, managing properties, and coordinating edits. RFC 2817 HTTP Upgrade to TLS Upgrading to TLS Within HTTP/1.1 How HTTP/1.1 can switch an open connection to TLS and tunnel through proxies. RFC 9298 Proxying UDP in HTTP Proxying UDP in HTTP Defines how a client asks an HTTP proxy to carry UDP packets to a target. RFC 5985 HELD HTTP-Enabled Location Delivery (HELD) Lets a device request its location from a server in its access network. RFC 6265 HTTP Cookies HTTP State Management Mechanism How a website remembers you between requests, written down as browsers and servers actually do it. RFC 8288 Web Linking Web Linking A common model for describing links between web resources and serializing them in HTTP headers. RFC 9113 HTTP/2 HTTP/2 One connection, many conversations: HTTP's meaning carried in binary frames. RFC 3404 DDDS URI resolution Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform Resource Identifiers (URI) How DDDS uses DNS rules to locate a server with information about a URI or URN. RFC 3405 URI.ARPA procedures Dynamic Delegation Discovery System (DDDS) Part Five: URI.ARPA Assignment Procedures The review and registration process for DNS-based URI and URN resolution rules. RFC 9114 HTTP/3 HTTP/3 HTTP over QUIC — eliminating head-of-line blocking with UDP-based transport RFC 1945 HTTP/1.0 Hypertext Transfer Protocol -- HTTP/1.0 The request/response protocol that launched the World Wide Web. RFC 7240 Prefer Header Prefer Header for HTTP Lets an HTTP client ask for optional server behaviour, knowing the server may ignore the request. RFC 7616 HTTP Digest Auth HTTP Digest Access Authentication A challenge-response login for HTTP that proves you know a password without sending it, now with SHA-256. RFC 9651 Structured Field Values Structured Field Values for HTTP A common set of data types for HTTP header and trailer fields, so that each new field does not need its own parser. RFC 3744 WebDAV ACL Web Distributed Authoring and Versioning (WebDAV) Access Control Protocol How a WebDAV server decides who may read, change or share each resource. RFC 6546 RID over HTTP/TLS Transport of Real-time Inter-network Defense (RID) Messages over HTTP/TLS How security teams send incident messages to each other over HTTP protected by TLS. RFC 9205 Building on HTTP Building Protocols with HTTP Best practices for specifying new application protocols that run on top of HTTP. RFC 7617 HTTP Basic Auth The 'Basic' HTTP Authentication Scheme How a browser sends a username and password in an HTTP header, and why that is only safe inside an encrypted connection. RFC 5789 HTTP PATCH PATCH Method for HTTP The HTTP method for changing part of a resource instead of replacing all of it. RFC 1630 URI Universal Resource Identifiers in WWW: A Unifying Syntax for the Expression of Names and Addresses of Objects on the Network as used in the World-Wide Web A common syntax for naming and addressing objects through different network schemes. RFC 2616 HTTP/1.1 Hypertext Transfer Protocol -- HTTP/1.1 The workhorse of the Web — persistent connections, chunked transfer, and content negotiation RFC 8820 URI design and ownership URI Design and Ownership Best practices for specifications that want to fix the shape of a URI, and why most of them should not. RFC 7472 IPP over HTTPS Internet Printing Protocol (IPP) over HTTPS Transport Binding and the 'ipps' URI Scheme How print clients reach a secure IPP printer over HTTPS, and the ipps:// address scheme that names it. RFC 7541 HPACK HPACK: Header Compression for HTTP/2 How HTTP/2 shrinks repeated request and response headers without opening the door to CRIME-style attacks. RFC 7838 HTTP Alt-Svc HTTP Alternative Services How an origin server can tell clients to reach the same resources somewhere else, on a different host, port or protocol. RFC 8030 HTTP Push Events Generic Event Delivery Using HTTP Push A standard way for a server to push events to a phone without the phone keeping a connection open. RFC 8441 WebSocket over HTTP/2 Bootstrapping WebSockets with HTTP/2 How a WebSocket gets opened on one stream of an HTTP/2 connection, using an extended CONNECT request. RFC 8470 Early Data in HTTP Using Early Data in HTTP How HTTP clients, servers and gateways cope with the replay risk of TLS early data, using an Early-Data header and the 425 status code. RFC 9209 Proxy-Status The Proxy-Status HTTP Response Header Field A response header that lets proxies and CDNs say what they did and what went wrong on the way to the origin. RFC 3310 HTTP Digest AKA Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) How UMTS Authentication and Key Agreement supplies one-time credentials to HTTP Digest. RFC 8187 HTTP Param Encoding Indicating Character Encoding and Language for HTTP Header Field Parameters How an HTTP header parameter can carry non-ASCII text and say which language it is in. RFC 9530 Digest fields Digest Fields HTTP header fields that carry a hash of a message's content or representation, replacing the older Digest field. RFC 2186 ICP v2 Internet Cache Protocol (ICP), version 2 The version 2 message format caches use to ask neighbors about URLs. RFC 2295 Transparent Negotiation Transparent Content Negotiation in HTTP An experimental HTTP extension for choosing among multiple representations of one resource. RFC 3510 IPP URL Scheme Internet Printing Protocol/1.1: IPP URL Scheme The exact rules for writing ipp: addresses that point to network printers and print jobs. RFC 4130 AS2 MIME-Based Secure Peer-to-Peer Business Data Interchange Using HTTP, Applicability Statement 2 (AS2) Sending signed, encrypted business documents straight over HTTP and getting a signed receipt back. RFC 5323 WebDAV SEARCH Web Distributed Authoring and Versioning (WebDAV) SEARCH A way to ask a WebDAV server to search its resources and send back only the matches. RFC 7239 Forwarded Header Forwarded HTTP Extension A standard HTTP header that lets proxies tell the next server who originally made the request. RFC 7977 MSRP over WebSocket The WebSocket Protocol as a Transport for the Message Session Relay Protocol (MSRP) How chat-style MSRP messages ride inside a WebSocket connection so web clients can use them. RFC 9458 Oblivious HTTP Oblivious HTTP Send HTTP requests through a relay so the server sees the request but not who sent it. RFC 9484 Proxying IP in HTTP Proxying IP in HTTP How an HTTP client can open a tunnel that carries whole IP packets through an HTTP server acting as an IP proxy. RFC 9931 HTTP/1.1 upgrade safety Security Considerations for Optimistic Protocol Transitions in HTTP/1.1 Why a client must not send data in a new protocol before the server has agreed to switch, and what proxies must do about it. RFC 9457 Problem Details v2 Problem Details for HTTP APIs A standard JSON (and XML) shape for machine-readable error details in HTTP API responses. RFC 7230 HTTP/1.1 Message Syntax Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing The structure, routing and connection rules for HTTP/1.1 messages. RFC 3229 HTTP delta encoding Delta encoding in HTTP How a web server can send just the changes to a page the client already has cached, as an extension to HTTP/1.1. RFC 5397 WebDAV Current Principal WebDAV Current Principal Extension A WebDAV property that identifies the principal for the authenticated user. RFC 6266 Content-Disposition Use of the Content-Disposition Header Field in the Hypertext Transfer Protocol (HTTP) The HTTP header that tells a browser to save a response as a file, and what name to give it. RFC 6415 Web Host Metadata Web Host Metadata A well-known file, /.well-known/host-meta, where a web host publishes metadata about itself and the resources it controls. RFC 6753 HELD dereference A Location Dereference Protocol Using HTTP-Enabled Location Delivery (HELD) How a holder of a location URI uses HTTP over TLS and a slice of HELD to fetch the location behind it. RFC 7711 POSH PKIX over Secure HTTP (POSH) Prove a hosted domain's TLS identity by publishing certificate fingerprints at a well-known HTTPS address. RFC 8292 VAPID Voluntary Application Server Identification (VAPID) for Web Push How a Web Push application server can optionally sign its requests so a push service knows who is calling. RFC 8297 Early Hints (103) An HTTP Status Code for Indicating Hints A provisional HTTP response that lets a server hand over hints while it is still working on the real answer. RFC 8586 CDN-Loop Loop Detection in Content Delivery Networks (CDNs) A request header that lets a CDN notice when a request has come back around to it, so loops can be stopped. RFC 8935 SET Push Delivery Push-Based Security Event Token (SET) Delivery Using HTTP How a sender hands a signed security event to a receiver with one HTTP POST over TLS, and gets a clear yes or no back. RFC 8936 SET Poll Delivery Poll-Based Security Event Token (SET) Delivery Using HTTP How a receiver pulls security events from a sender by polling with HTTP POST, and tells the sender which ones arrived. RFC 9220 Bootstrapping WebSockets with HTTP/3 HTTP/3 rules for using Extended CONNECT to bootstrap WebSocket streams. RFC 9292 Binary HTTP Binary Representation of HTTP Messages A compact byte format for writing down an HTTP request or response outside of a live HTTP connection. RFC 9297 HTTP Datagrams HTTP Datagrams and the Capsule Protocol A way to send small, possibly unreliable datagrams inside an HTTP connection, plus a capsule format for when the transport cannot. RFC 9421 HTTP Message Signatures HTTP Message Signatures A way to sign just the parts of an HTTP message that matter, so the signature survives proxies and rewrites. RFC 9577 Privacy Pass HTTP auth The Privacy Pass HTTP Authentication Scheme How a website challenges a browser for an unlinkable Privacy Pass token, and how the browser hands one back, using ordinary HTTP headers. RFC 9725 WHIP WebRTC-HTTP Ingestion Protocol (WHIP) A one-request HTTP handshake that lets encoders and cameras push live WebRTC video into streaming services. RFC 2396 URI Generic Syntax Uniform Resource Identifiers (URI): Generic Syntax The generic grammar that lets software split any web address or other identifier into its common parts. RFC 4151 tag URI The 'tag' URI Scheme A way to mint names that nobody else can hand out, without asking anyone's permission first. RFC 6202 Long polling Known Issues and Best Practices for the Use of Long Polling and Streaming in Bidirectional HTTP How websites work around HTTP being one-way, what each method costs, and how to deploy them without tripping over proxies. RFC 8958 URI.ARPA Rules Updated Registration Rules for URI.ARPA Updated registration rules remove a requirement to use a discontinued URI scheme tree. RFC 2483 URI Resolution Services Necessary for URN Resolution Nine named operations for asking a server what a URI means, beyond just fetching the resource. RFC 2187 Application of Internet Cache Protocol (ICP), version 2 How web caches ask each other whether they already hold a page, and what that costs. RFC 6906 The 'profile' Link Relation Type How to label a representation with extra rules and conventions without inventing a new media type. RFC 8216 HLS HTTP Live Streaming How a video stream is cut into files and described by a playlist, so the viewer can change quality without stopping. RFC 1808 Relative URLs Relative Uniform Resource Locators How a short reference inside a document is turned back into a full address. RFC 2227 HTTP Hit-Metering Simple Hit-Metering and Usage-Limiting for HTTP How web caches can report page-view counts to publishers, and how publishers can cap how often a cached copy is reused. RFC 3368 go URI scheme The 'go' URI Scheme for the Common Name Resolution Protocol A compact URI format for pointing at a common-name lookup, or at one record on one server. RFC 4236 OPES HTTP HTTP Adaptation with Open Pluggable Edge Services (OPES) How a helper server at the edge of the network is told which parts of an HTTP message to adapt, and how the result stays valid HTTP. RFC 5147 text/plain Fragments URI Fragment Identifiers for the text/plain Media Type How a URL can point to a character range or a line range inside a plain text file. RFC 6249 Metalink/HTTP Metalink/HTTP: Mirrors and Hashes Mirror lists, hashes and signatures for a download, carried in ordinary HTTP response headers. RFC 7540 HTTP/2 Hypertext Transfer Protocol Version 2 (HTTP/2) Binary framing, multiplexing, and header compression for a faster Web. RFC 7692 WebSocket Compression Compression Extensions for WebSocket A framework for compressing WebSocket messages one at a time, plus the DEFLATE-based permessage-deflate extension. RFC 7725 HTTP 451 An HTTP Status Code to Report Legal Obstacles HTTP status 451 identifies access denied because of a legal demand. RFC 8075 HTTP-CoAP Mapping Guidelines for Mapping Implementations: HTTP to the Constrained Application Protocol (CoAP) How a proxy should translate web (HTTP) requests into CoAP messages for tiny networked devices, and the answers back. RFC 8144 WebDAV Prefer Use of the Prefer Header Field in Web Distributed Authoring and Versioning (WebDAV) How WebDAV clients can use the Prefer header to get smaller responses, fewer round trips, and a way to skip the root resource. RFC 8188 Encrypted Content-Encoding Encrypted Content-Encoding for HTTP An HTTP content coding that encrypts the message body in fixed-size records, so stored or relayed content stays unreadable without the key. RFC 8291 Web Push Encryption Message Encryption for Web Push How Web Push messages are encrypted end to end so the push service cannot read or forge them. RFC 8307 WebSocket Well-Known Well-Known URIs for the WebSocket Protocol The /.well-known/ URI mechanism formally applies to ws and wss schemes. RFC 8336 HTTP/2 ORIGIN The ORIGIN HTTP/2 Frame How an HTTP/2 server tells a client exactly which websites a single connection can be used for. RFC 8473 Token Binding over HTTP Token Binding over HTTP How browsers and servers carry Token Binding proofs in an HTTP header so stolen cookies and tokens stop working elsewhere. RFC 9204 QPACK QPACK: Field Compression for HTTP/3 How HTTP/3 shrinks repeated header fields without making every request wait on a lost packet. RFC 9213 CDN-Cache-Control Targeted HTTP Cache Control A convention for giving different caches, such as CDNs, their own cache instructions in separate response headers. RFC 9218 HTTP Priority Extensible Prioritization Scheme for HTTP A simple, extensible way for HTTP clients and servers to say which responses matter most. RFC 9264 Linkset Linkset: Media Types and a Link Relation Type for Link Sets Two standalone document formats and a link relation type for publishing a whole set of web links in one place. RFC 10008 HTTP QUERY The HTTP QUERY Method A new HTTP method that carries a query in the request body while staying safe, idempotent and cacheable. RFC 10036 HTTP Incremental header Incremental Forwarding of HTTP Messages A header that asks proxies and other HTTP intermediaries to pass a message along as it arrives instead of buffering it. RFC 7231 HTTP/1.1 Semantics Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content What each HTTP request method, status code and header field actually means. RFC 2068 HTTP/1.1 Original Hypertext Transfer Protocol -- HTTP/1.1 The first standard for HTTP/1.1: persistent connections, mandatory Host headers, caching rules and content negotiation. RFC 5988 Web Linking Web Linking Typed links between web resources, a registry of link relation types, and the HTTP Link header. RFC 7234 HTTP Caching Hypertext Transfer Protocol (HTTP/1.1): Caching How a copy of a web response is kept, when it may be reused, and how a server says when it must be checked again. RFC 2964 Use of HTTP State Management Which uses of cookies the IETF recommends, which it forbids, and what browsers should let users control. RFC 3143 Known HTTP Proxy/Caching Problems A catalog of problems with web caching proxies and proposed solutions. RFC 3507 ICAP Internet Content Adaptation Protocol (ICAP) Pass HTTP messages to external servers for transformation and adaptation. RFC 3508 H323 URL H.323 Uniform Resource Locator (URL) Scheme Registration A URL scheme for naming endpoints in H.323 video and audio calls. RFC 4559 SPNEGO HTTP auth SPNEGO-based Kerberos and NTLM HTTP Authentication in Microsoft Windows Using Kerberos and NTLM for web authentication in Windows with HTTP Negotiate. RFC 5829 Version Link Relations Link Relation Types for Simple Version Navigation between Web Resources Link types for web resources to navigate between versions, working copies, and version history. RFC 5843 HTTP Digest Algorithms Additional Hash Algorithms for HTTP Instance Digests Adds SHA-256 and SHA-512 to HTTP's Instance Digest algorithm registry. RFC 6573 The Item and Collection Link Relations Defines reciprocal Web link relations for a collection and its members. RFC 6596 Canonical Link Relation The Canonical Link Relation A link tag to mark a page's preferred version when duplicates exist RFC 6694 about URI Scheme The "about" URI Scheme The about: address that browsers use to reach their own built-in pages, such as about:blank. RFC 6983 Models for HTTP-Adaptive-Streaming-Aware Content Distribution Network Interconnection (CDNI) What HTTP Adaptive Streaming does to the interfaces that let separate content delivery networks work together. RFC 7089 Memento HTTP Framework for Time-Based Access to Resource States -- Memento Access past versions of web pages through datetime negotiation. RFC 8594 Sunset Header The Sunset HTTP Header Field Announce when a web service or resource will shut down. RFC 8631 Web service link rels Link Relation Types for Web Services Standard link relation types to point clients to service documentation, descriptions, and status RFC 8959 secret-token URI The "secret-token" URI Scheme Registers a URI scheme that helps tools identify authentication tokens. RFC 9659 Zstd Window Size Window Sizing for Zstandard Content Encoding Sets an 8 MB maximum Zstandard window size for HTTP content coding. RFC 2518 WebDAV HTTP Extensions for Distributed Authoring -- WEBDAV HTTP extensions for editing, managing, and versioning web documents from remote clients. RFC 8941 Structured Fields Structured Field Values for HTTP A standard syntax for HTTP header and trailer field values. RFC 7232 HTTP Conditional Requests Hypertext Transfer Protocol (HTTP/1.1): Conditional Requests How HTTP clients ask 'only if it changed' and 'only if it is still the version I saw', using validators and preconditions. RFC 3205 HTTP substrate On the use of HTTP as a Substrate Advice on when and how to build a new protocol on top of HTTP, from ports and URLs to status codes. RFC 2756 HTCP Hyper Text Caching Protocol (HTCP/0.0) A protocol for web caches to discover each other and share information about cached content. RFC 4437 WebDAV redirects Web Distributed Authoring and Versioning (WebDAV) Redirect Reference Resources Signposts on a server that point clients to resources elsewhere. RFC 5842 WebDAV BIND Binding Extensions to Web Distributed Authoring and Versioning (WebDAV) Create multiple names for the same file, like aliases in a filesystem. RFC 7486 HOBA HTTP Origin-Bound Authentication (HOBA) Digital-signature-based HTTP authentication that replaces passwords RFC 7595 URI Scheme Guidelines Guidelines and Registration Procedures for URI Schemes The rules for inventing a new URI scheme such as http: and getting its name onto the official IANA list. RFC 8120 Mutual Auth for HTTP Mutual Authentication Protocol for HTTP Password authentication where client and server both prove they know the secret. RFC 8121 Mutual Authentication Protocol for HTTP: Cryptographic Algorithms Based on the Key Agreement Mechanism 3 (KAM3) Algorithms using discrete-logarithm and elliptic-curve groups for HTTP mutual authentication. RFC 7233 HTTP Range Requests Hypertext Transfer Protocol (HTTP/1.1): Range Requests Requesting and responding to partial content in HTTP/1.1. RFC 2732 Format for Literal IPv6 Addresses in URL's Square brackets mark a literal IPv6 address inside a URL. RFC 7615 HTTP Authentication-Info HTTP Authentication-Info and Proxy-Authentication-Info Response Header Fields Response headers for authentication schemes to return server information after credentials are accepted. RFC 1866 HTML 2.0 Hypertext Markup Language - 2.0 The language that structures content for web browsers. RFC 2296 RVSA/1.0 HTTP Remote Variant Selection Algorithm -- RVSA/1.0 A formula for picking the best version of a web page on the server side. RFC 2660 S-HTTP The Secure HyperText Transfer Protocol A way to sign, encrypt and authenticate individual HTTP messages, with the security options negotiated per transaction. RFC 2935 IOTP over HTTP Internet Open Trading Protocol (IOTP) HTTP Supplement How the Internet Open Trading Protocol's XML messages are carried over HTTP 1.0 and 1.1. RFC 4156 wais URI scheme The wais URI Scheme The URI forms used to identify WAIS databases, searches, and documents. RFC 4157 prospero URI scheme The prospero URI Scheme The URI form used to locate resources through the Prospero Directory Service. RFC 5538 news and nntp URIs The 'news' and 'nntp' URI Schemes How a link can point at a Usenet article or newsgroup, moved out of RFC 1738 so that RFC could retire. RFC 5954 SIP IPv6 ABNF fix Essential Correction for IPv6 ABNF and URI Comparison in RFC 3261 A fix for a faulty IPv6 grammar rule in SIP, plus a rule that URIs compare by binary address, not by spelling. RFC 5989 A SIP Event Package for Subscribing to Changes to an HTTP Resource How a SIP client asks to be told when a web resource is created, changed or deleted, instead of polling it. RFC 5995 WebDAV POST Add-Member Using POST to Add Members to Web Distributed Authoring and Versioning (WebDAV) Collections A way for a WebDAV server to say where clients can POST new files and let the server pick the name. RFC 6578 WebDAV Sync Collection Synchronization for Web Distributed Authoring and Versioning (WebDAV) A token-based report that lets WebDAV clients ask only what changed in a collection since last time. RFC 7639 ALPN HTTP Header The ALPN HTTP Header Field A header that lets an HTTP CONNECT request announce which application protocol will run inside the tunnel. RFC 8164 Opportunistic HTTP/2 Opportunistic Security for HTTP/2 A way to serve ordinary http addresses over an encrypted connection, without the client having to trust the server's identity. RFC 8246 HTTP Immutable HTTP Immutable Responses A Cache-Control flag that tells browsers a fresh cached file will not change, so reloads can skip revalidation. RFC 9211 Cache-Status The Cache-Status HTTP Response Header Field A standard HTTP header that lets each cache report how it handled a request. RFC 9246 CDNI URI Signing URI Signing for Content Delivery Network Interconnection (CDNI) How a signed token inside a URL lets a content provider and a chain of CDNs agree on who may fetch what. RFC 9412 HTTP/3 ORIGIN The ORIGIN Extension in HTTP/3 The HTTP/2 ORIGIN frame adapted for use on an HTTP/3 control stream. RFC 9532 Next-hop aliases HTTP Proxy-Status Parameter for Next-Hop Aliases A Proxy-Status parameter that lets a proxy report the full chain of DNS alias names it saw on the way to the next hop. RFC 9652 Link-Template Header The Link-Template HTTP Header Field An HTTP header that describes link patterns clients can expand into addresses. RFC 9727 api-catalog api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs A well-known address where a website lists the APIs it offers, so software can find them without a human. RFC 9729 Concealed HTTP Auth The Concealed HTTP Authentication Scheme An HTTP login that stays invisible: servers never issue a challenge, so unauthenticated clients learn nothing. RFC 9842 Dictionary Transport Compression Dictionary Transport How a web server and a browser agree to compress a new response against an older one they both already have. RFC 9875 HTTP cache groups HTTP Cache Groups Tag HTTP responses with group names so a cache can drop related stored responses together. RFC 2069 HTTP Digest Auth An Extension to HTTP : Digest Access Authentication Authentication without sending passwords in the clear. RFC 3230 Instance Digests in HTTP Standard checksums for the whole web file, not just the piece you received RFC 2718 Guidelines for new URL Schemes A how-to guide for defining the syntax and semantics of new URL schemes. RFC 5987 Character Set and Language Encoding for Hypertext Transfer Protocol (HTTP) Header Field Parameters Encoding non-ASCII characters and language info in HTTP headers RFC 2109 Cookies Original HTTP State Management Mechanism The standard mechanism for servers to store state on clients across multiple HTTP requests. RFC 2965 Cookies v2 HTTP State Management Mechanism A second attempt at HTTP state management using Set-Cookie2 and Cookie headers. RFC 7538 HTTP 308 The Hypertext Transfer Protocol Status Code 308 (Permanent Redirect) A permanent redirect that keeps the request method unchanged. RFC 2145 Use and Interpretation of HTTP Version Numbers Rules for how implementations of different HTTP versions can work together. RFC 2388 multipart/form-data Returning Values from Forms: multipart/form-data A standard way to encode forms and file uploads for web applications. RFC 8740 TLS 1.3 with HTTP/2 Using TLS 1.3 with HTTP/2 HTTP/2 forbids TLS 1.3 post-handshake certificate requests RFC 2936 HTTP MIME Type Handler Detection Methods to detect MIME types supported by a user's browser RFC 3875 CGI The Common Gateway Interface (CGI) Version 1.1 How web servers run helper programs and pass them request data. RFC 4169 Digest AKA v2 Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) Version-2 A stronger HTTP authentication method using mobile phone credentials. RFC 4229 HTTP Header Field Registrations The official register of HTTP header field names. RFC 4709 Mounting WebDAV Mounting Web Distributed Authoring and Versioning (WebDAV) Servers A way to open WebDAV servers directly from browser links using a special file format RFC 5861 Stale Cache-Control HTTP Cache-Control Extensions for Stale Content Two Cache-Control directives that let HTTP caches serve stale content while revalidating or when the origin fails. RFC 6579 Disclosure Link Relation The 'disclosure' Link Relation Type The disclosure relation points to IPR disclosures about a resource. RFC 6861 create-form / edit-form The "create-form" and "edit-form" Link Relations Two standard link names for web forms that create or edit resources. RFC 6892 describes Link Relation The 'describes' Link Relation Type A link relation for a resource that provides a description of another resource. RFC 6896 SCS SCS: KoanLogic's Secure Cookie Sessions for HTTP Encrypting and signing HTTP cookies so the browser carries secure state. RFC 6903 Additional Link Relation Types Five new names for describing how web resources relate to each other. RFC 7236 HTTP Auth Schemes Initial Hypertext Transfer Protocol (HTTP) Authentication Scheme Registrations The initial registrations in the HTTP authentication scheme registry. RFC 7237 HTTP Method Registry Initial Hypertext Transfer Protocol (HTTP) Method Registrations The initial registrations of HTTP methods defined before the IANA registry. RFC 8565 HTJP Hypertext Jeopardy Protocol (HTJP/1.0) An April 1st thought experiment reverses HTTP's request and response conventions. RFC 8574 cite-as Link Relation cite-as: A Link Relation to Convey a Preferred URI for Referencing A link relation to convey a preferred URI for permanent reference RFC 8674 Safe HTTP preference The "safe" HTTP Preference A browser can politely ask a website for family-friendly content. RFC 9440 Client-Cert Header Client-Cert HTTP Header Field Passing client certificate information through a reverse proxy in HTTP. RFC 7284 The Profile URI Registry A public registry for profile URIs used by specifications. RFC 4395 URI Scheme Guidelines Guidelines and Registration Procedures for New URI Schemes How to design and register new web address prefixes RFC 2070 HTML i18n Internationalization of the Hypertext Markup Language Extending HTML to support every language and writing system in the world. RFC 2717 Registration Procedures for URL Scheme Names How to officially register a new URL scheme name. RFC 3305 URIs, URLs and URNs Report from the Joint W3C/IETF URI Planning Interest Group: Uniform Resource Identifiers (URIs), URLs, and Uniform Resource Names (URNs): Clarifications and Recommendations A planning group's attempt to untangle what URI, URL and URN mean and how schemes and namespaces get registered. RFC 7694 Accept-Encoding Reply Hypertext Transfer Protocol (HTTP) Client-Initiated Content-Encoding Letting servers tell clients which request compression methods they accept RFC 4316 WebDAV datatypes Datatypes for Web Distributed Authoring and Versioning (WebDAV) Properties Adding datatypes to WebDAV property values so servers can interpret them correctly. RFC 7804 HTTP SCRAM Salted Challenge Response HTTP Authentication Mechanism Challenge-response authentication that never exposes your password. RFC 8053 HTTP Interactive Auth HTTP Authentication Extensions for Interactive Clients Extensions for HTTP authentication to support modern web applications. RFC 8673 HTTP live range HTTP Random Access and Live Content HTTP range requests that start at any byte and continue indefinitely as new content is appended, for streaming and live data. RFC 8942 Client Hints HTTP Client Hints Enabling servers to explicitly request client characteristics without passive fingerprinting RFC 9163 Expect-CT Expect-CT Extension for HTTP HTTP header for Certificate Transparency compliance monitoring RFC 7936 WebSocket Subprotocols Clarifying Registry Procedures for the WebSocket Subprotocol Name Registry Clarifies case handling in the WebSocket subprotocol name registry. RFC 9745 Deprecation header The Deprecation HTTP Response Header Field Signal to API clients that a resource will or has been deprecated RFC 7238 308 Permanent Redirect The Hypertext Transfer Protocol Status Code 308 (Permanent Redirect) A redirection status code that preserves the HTTP request method. RFC 2774 An HTTP Extension Framework A standard way to add protocol extensions to HTTP.