Areas / HTTP & Web

HTTP & Web

The web: HTTP, URIs, WebSockets and friends.

195 RFCs · 195 with AI ELI5 · 0 summaries · 0 index pages

With AI ELI5 195

RFC 9110 HTTP Semantics HTTP Semantics The unified specification of HTTP semantics for all protocol versions RFC 9112 HTTP/1.1 HTTP/1.1 How a web request and its response are written down, framed and carried over a connection. RFC 9111 HTTP Caching HTTP Caching The rules for when HTTP responses may be stored, reused, checked again and thrown away. RFC 7480 RDAP over HTTP HTTP Usage in the Registration Data Access Protocol (RDAP) How RDAP, the modern replacement for WHOIS, uses plain HTTP to ask for and return registration data. RFC 4918 WebDAV HTTP Extensions for Web Distributed Authoring and Versioning (WebDAV) HTTP extensions that let clients edit, organise and lock files on a web server instead of only reading them. RFC 2817 HTTP Upgrade to TLS Upgrading to TLS Within HTTP/1.1 How HTTP/1.1 can switch an open connection to TLS, plus the CONNECT method for tunnels through proxies. RFC 5985 HELD HTTP-Enabled Location Delivery (HELD) How a device asks the network it is plugged into where it is, using plain HTTP and XML. RFC 9298 Proxying UDP in HTTP Proxying UDP in HTTP How an HTTP client asks a proxy to carry UDP packets, much as CONNECT carries TCP. RFC 3405 URI.ARPA procedures Dynamic Delegation Discovery System (DDDS) Part Five: URI.ARPA Assignment Procedures The rules and mailing-list process for adding resolution rules to the URI.ARPA and URN.ARPA DNS zones. RFC 8288 Web Linking Web Linking A standard way to say how one web resource relates to another, and to carry those links in an HTTP Link header. RFC 9113 HTTP/2 HTTP/2 One connection, many conversations: HTTP's meaning carried in binary frames. RFC 6265 HTTP Cookies HTTP State Management Mechanism How a website remembers you between requests, written down as browsers and servers actually do it. RFC 9114 HTTP/3 HTTP/3 HTTP over QUIC — eliminating head-of-line blocking with UDP-based transport RFC 3404 DDDS URI resolution Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform Resource Identifiers (URI) How to turn a URI into a chain of DNS lookups that ends at a server able to answer questions about it. RFC 1945 HTTP/1.0 Hypertext Transfer Protocol -- HTTP/1.0 The request/response protocol that launched the World Wide Web. RFC 7240 Prefer Header Prefer Header for HTTP A polite HTTP request header for saying how you would like the server to behave, which the server may ignore. RFC 7616 HTTP Digest Auth HTTP Digest Access Authentication A challenge-response login for HTTP that proves you know a password without sending it, now with SHA-256. RFC 5789 HTTP PATCH PATCH Method for HTTP The HTTP method for sending just the changes to a resource, instead of replacing the whole thing. RFC 9651 Structured Field Values Structured Field Values for HTTP A common data model and strict parser for new HTTP header and trailer fields: lists, dictionaries and typed items. RFC 3744 WebDAV ACL Web Distributed Authoring and Versioning (WebDAV) Access Control Protocol How a WebDAV server says who may read, write or change the permissions of each web resource. RFC 6546 RID over HTTP/TLS Transport of Real-time Inter-network Defense (RID) Messages over HTTP/TLS How RID incident messages are carried between peers as HTTP requests over mutually authenticated TLS. RFC 9205 Building Protocols with HTTP Best practices for specifying new application protocols that run on top of HTTP. RFC 7617 HTTP Basic Auth The 'Basic' HTTP Authentication Scheme How a browser sends a username and password in an HTTP header, and why that is only safe inside an encrypted connection. RFC 7838 HTTP Alt-Svc HTTP Alternative Services How a web server can say 'you can also reach me over there', with a different host, port or protocol. RFC 8030 HTTP Push Events Generic Event Delivery Using HTTP Push How a phone or device gets real-time events through one shared push service, using plain HTTP and HTTP/2 server push. RFC 2616 HTTP/1.1 Hypertext Transfer Protocol -- HTTP/1.1 The workhorse of the Web — persistent connections, chunked transfer, and content negotiation RFC 1630 URI Universal Resource Identifiers in WWW: A Unifying Syntax for the Expression of Names and Addresses of Objects on the Network as used in the World-Wide Web The syntax the early World-Wide Web used to name and address any object on the network. RFC 2295 Transparent Negotiation Transparent Content Negotiation in HTTP Let one web address serve several versions of a page, and have the best one picked automatically. RFC 8820 URI design and ownership URI Design and Ownership Why standards should not dictate the shape of other people's URLs, and what to do instead. RFC 3510 IPP URL Scheme Internet Printing Protocol/1.1: IPP URL Scheme The exact rules for writing ipp: addresses that point to network printers and print jobs. RFC 7239 Forwarded Header Forwarded HTTP Extension A standard HTTP header that lets proxies tell the next server who originally made the request. RFC 7472 IPP over HTTPS Internet Printing Protocol (IPP) over HTTPS Transport Binding and the 'ipps' URI Scheme How print clients reach a secure IPP printer over HTTPS, and the ipps:// address scheme that names it. RFC 7541 HPACK HPACK: Header Compression for HTTP/2 How HTTP/2 shrinks repeated request and response headers without opening the door to CRIME-style attacks. RFC 8441 WebSocket over HTTP/2 Bootstrapping WebSockets with HTTP/2 How a WebSocket gets opened on one stream of an HTTP/2 connection, using an extended CONNECT request. RFC 8470 Early Data in HTTP Using Early Data in HTTP How HTTP clients, servers and gateways cope with the replay risk of TLS early data, using an Early-Data header and the 425 status code. RFC 9209 Proxy-Status The Proxy-Status HTTP Response Header Field A response header that lets proxies and CDNs say what they did and what went wrong on the way to the origin. RFC 3310 HTTP Digest AKA Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) How to use the mobile-network AKA challenge-response as a one-time password for HTTP Digest and SIP logins. RFC 8187 HTTP Param Encoding Indicating Character Encoding and Language for HTTP Header Field Parameters How an HTTP header parameter can carry non-ASCII text and say which language it is in. RFC 9530 Digest fields Digest Fields HTTP header fields that carry a hash of a message's content or representation, replacing the older Digest field. RFC 2186 ICP v2 Internet Cache Protocol (ICP), version 2 A lightweight message format that lets web caches ask their neighbors whether they already hold a URL. RFC 4130 AS2 MIME-Based Secure Peer-to-Peer Business Data Interchange Using HTTP, Applicability Statement 2 (AS2) Sending signed, encrypted business documents straight over HTTP and getting a signed receipt back. RFC 6266 Content-Disposition Use of the Content-Disposition Header Field in the Hypertext Transfer Protocol (HTTP) The HTTP header that tells a browser to save a response as a file, and what name to give it. RFC 7977 MSRP over WebSocket The WebSocket Protocol as a Transport for the Message Session Relay Protocol (MSRP) How chat-style MSRP messages ride inside a WebSocket connection so web clients can use them. RFC 9458 Oblivious HTTP Oblivious HTTP Send HTTP requests through a relay so the server sees the request but not who sent it. RFC 9484 Proxying IP in HTTP Proxying IP in HTTP How an HTTP client can open a tunnel that carries whole IP packets through an HTTP server acting as an IP proxy. RFC 9931 HTTP/1.1 upgrade safety Security Considerations for Optimistic Protocol Transitions in HTTP/1.1 Why a client must not send data in a new protocol before the server has agreed to switch, and what proxies must do about it. RFC 9457 Problem Details v2 Problem Details for HTTP APIs A standard JSON (and XML) shape for machine-readable error details in HTTP API responses. RFC 7230 HTTP/1.1 Message Syntax Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing The text format of HTTP/1.1 messages, how they are framed, routed and carried over connections. RFC 3229 HTTP delta encoding Delta encoding in HTTP How a web server can send just the changes to a page the client already has cached, as an extension to HTTP/1.1. RFC 5323 WebDAV SEARCH Web Distributed Authoring and Versioning (WebDAV) SEARCH A way to ask a WebDAV server to search its resources and send back only the matches. RFC 5397 WebDAV Current Principal WebDAV Current Principal Extension A WebDAV property that tells a client which principal resource represents the user it is logged in as. RFC 6415 Web Host Metadata Web Host Metadata A well-known file, /.well-known/host-meta, where a web host publishes metadata about itself and the resources it controls. RFC 6753 HELD dereference A Location Dereference Protocol Using HTTP-Enabled Location Delivery (HELD) How a holder of a location URI uses HTTP over TLS and a slice of HELD to fetch the location behind it. RFC 7711 POSH PKIX over Secure HTTP (POSH) Prove a hosted domain's TLS identity by publishing certificate fingerprints at a well-known HTTPS address. RFC 7725 HTTP 451 An HTTP Status Code to Report Legal Obstacles HTTP status 451 lets a server say a page is blocked because of a legal demand. RFC 8075 HTTP-CoAP Mapping Guidelines for Mapping Implementations: HTTP to the Constrained Application Protocol (CoAP) How a proxy should translate web (HTTP) requests into CoAP messages for tiny networked devices, and the answers back. RFC 8291 Web Push Encryption Message Encryption for Web Push How Web Push messages are encrypted end to end so the push service cannot read or forge them. RFC 8292 VAPID Voluntary Application Server Identification (VAPID) for Web Push How a Web Push application server can optionally sign its requests so a push service knows who is calling. RFC 8336 HTTP/2 ORIGIN The ORIGIN HTTP/2 Frame How an HTTP/2 server tells a client exactly which websites a single connection can be used for. RFC 8586 CDN-Loop Loop Detection in Content Delivery Networks (CDNs) A request header that lets a CDN notice when a request has come back around to it, so loops can be stopped. RFC 8935 SET Push Delivery Push-Based Security Event Token (SET) Delivery Using HTTP How a sender hands a signed security event to a receiver with one HTTP POST over TLS, and gets a clear yes or no back. RFC 8936 SET Poll Delivery Poll-Based Security Event Token (SET) Delivery Using HTTP How a receiver pulls security events from a sender by polling with HTTP POST, and tells the sender which ones arrived. RFC 9220 Bootstrapping WebSockets with HTTP/3 How the WebSocket-over-HTTP/2 mechanism carries over to HTTP/3 with one registered setting. RFC 9292 Binary HTTP Binary Representation of HTTP Messages A compact byte format for writing down an HTTP request or response outside of a live HTTP connection. RFC 9297 HTTP Datagrams HTTP Datagrams and the Capsule Protocol A way to send small, possibly unreliable datagrams inside an HTTP connection, plus a capsule format for when the transport cannot. RFC 9421 HTTP Message Signatures HTTP Message Signatures A way to sign just the parts of an HTTP message that matter, so the signature survives proxies and rewrites. RFC 9577 Privacy Pass HTTP auth The Privacy Pass HTTP Authentication Scheme How a website challenges a browser for an unlinkable Privacy Pass token, and how the browser hands one back, using ordinary HTTP headers. RFC 9725 WHIP WebRTC-HTTP Ingestion Protocol (WHIP) A one-request HTTP handshake that lets encoders and cameras push live WebRTC video into streaming services. RFC 2396 URI Generic Syntax Uniform Resource Identifiers (URI): Generic Syntax The generic grammar that lets software split any web address or other identifier into its common parts. RFC 4151 tag URI The 'tag' URI Scheme Identifiers made unique by combining a domain or email address with a date, with no registry needed. RFC 6202 Long polling Known Issues and Best Practices for the Use of Long Polling and Streaming in Bidirectional HTTP What goes wrong when HTTP is stretched to push server updates, and how to make long polling and streaming behave. RFC 8958 URI.ARPA Rules Updated Registration Rules for URI.ARPA A one-paragraph fix that stops URI.ARPA registrations from requiring a URI tree that no longer exists. RFC 2483 URI Resolution Services Necessary for URN Resolution A small named set of operations for asking a resolver what a URI means, beyond just fetching it. RFC 2187 Application of Internet Cache Protocol (ICP), version 2 How Web caches use ICPv2 to ask their neighbors who already has a page, and what went wrong along the way. RFC 6906 The 'profile' Link Relation Type How to label representations with additional constraints and conventions beyond their media type. RFC 6983 Models for HTTP-Adaptive-Streaming-Aware Content Distribution Network Interconnection (CDNI) What happens to video chunks, manifests, logs and signed URLs when several CDNs must hand off HTTP adaptive streaming to each other. RFC 8216 HLS HTTP Live Streaming Breaking video into chunks so players can adapt to network speed and deliver streaming content. RFC 1808 Relative URLs Relative Uniform Resource Locators How a short link like ../g gets turned into a full URL by borrowing context from a base URL. RFC 3368 go URI scheme The 'go' URI Scheme for the Common Name Resolution Protocol A compact URI format for pointing at a common-name lookup, or at one record on one server. RFC 4236 OPES HTTP HTTP Adaptation with Open Pluggable Edge Services (OPES) How a helper server at the edge of the network is told which parts of an HTTP message to adapt, and how the result stays valid HTTP. RFC 5147 text/plain Fragments URI Fragment Identifiers for the text/plain Media Type How a URL can point to a character range or a line range inside a plain text file. RFC 6249 Metalink/HTTP Metalink/HTTP: Mirrors and Hashes Mirror lists, hashes and signatures for a download, carried in ordinary HTTP response headers. RFC 7540 HTTP/2 Hypertext Transfer Protocol Version 2 (HTTP/2) Binary framing, multiplexing, and header compression for a faster Web. RFC 7692 WebSocket Compression Compression Extensions for WebSocket A framework for compressing WebSocket messages one at a time, plus the DEFLATE-based permessage-deflate extension. RFC 8144 WebDAV Prefer Use of the Prefer Header Field in Web Distributed Authoring and Versioning (WebDAV) How WebDAV clients can use the Prefer header to get smaller responses, fewer round trips, and a way to skip the root resource. RFC 8188 Encrypted Content-Encoding Encrypted Content-Encoding for HTTP An HTTP content coding that encrypts the message body in fixed-size records, so stored or relayed content stays unreadable without the key. RFC 8297 Early Hints (103) An HTTP Status Code for Indicating Hints A provisional HTTP response that lets a server hand over hints while it is still working on the real answer. RFC 8307 WebSocket Well-Known Well-Known URIs for the WebSocket Protocol The /.well-known/ URI mechanism now formally applies to ws and wss WebSocket URIs. RFC 8473 Token Binding over HTTP Token Binding over HTTP How browsers and servers carry Token Binding proofs in an HTTP header so stolen cookies and tokens stop working elsewhere. RFC 9204 QPACK QPACK: Field Compression for HTTP/3 How HTTP/3 shrinks repeated header fields without making every request wait on a lost packet. RFC 9213 CDN-Cache-Control Targeted HTTP Cache Control A convention for giving different caches, such as CDNs, their own cache instructions in separate response headers. RFC 9218 HTTP Priority Extensible Prioritization Scheme for HTTP A simple, extensible way for HTTP clients and servers to say which responses matter most. RFC 9264 Linkset Linkset: Media Types and a Link Relation Type for Link Sets Two standalone document formats and a link relation type for publishing a whole set of web links in one place. RFC 9875 HTTP cache groups HTTP Cache Groups Tag HTTP responses with group names so a cache can drop related stored responses together. RFC 10008 HTTP QUERY The HTTP QUERY Method A new HTTP method that carries a query in the request body while staying safe, idempotent and cacheable. RFC 10036 HTTP Incremental header Incremental Forwarding of HTTP Messages A header that asks proxies and other HTTP intermediaries to pass a message along as it arrives instead of buffering it. RFC 7231 HTTP/1.1 Semantics Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content What HTTP/1.1 requests and responses actually mean: methods, status codes, headers and content negotiation. RFC 2068 HTTP/1.1 Original Hypertext Transfer Protocol -- HTTP/1.1 The first standard for HTTP/1.1: persistent connections, mandatory Host headers, caching rules and content negotiation. RFC 5988 Web Linking Web Linking Typed links between web resources, a registry of link relation types, and the HTTP Link header. RFC 2660 S-HTTP The Secure HyperText Transfer Protocol A way to sign, authenticate and encrypt individual HTTP messages, with the protections negotiated for each transaction. RFC 8164 Opportunistic HTTP/2 Opportunistic Security for HTTP/2 Light encryption for HTTP URIs using TLS and HTTP/2 to block passive eavesdropping. RFC 7234 HTTP Caching Hypertext Transfer Protocol (HTTP/1.1): Caching Rules for storing and reusing HTTP responses to improve performance. RFC 2964 Use of HTTP State Management Which uses of cookies the IETF recommends, which it forbids, and what browsers should let users control. RFC 3143 Known HTTP Proxy/Caching Problems A catalog of problems with web caching proxies and proposed solutions. RFC 3507 ICAP Internet Content Adaptation Protocol (ICAP) Pass HTTP messages to external servers for transformation and adaptation. RFC 3508 H323 URL H.323 Uniform Resource Locator (URL) Scheme Registration A URL scheme for naming endpoints in H.323 video and audio calls. RFC 4559 SPNEGO HTTP auth SPNEGO-based Kerberos and NTLM HTTP Authentication in Microsoft Windows Using Kerberos and NTLM for web authentication in Windows with HTTP Negotiate. RFC 5829 Version Link Relations Link Relation Types for Simple Version Navigation between Web Resources Link types for web resources to navigate between versions, working copies, and version history. RFC 5843 HTTP Digest Algorithms Additional Hash Algorithms for HTTP Instance Digests Adding SHA-256 and SHA-512 to the list of checksums for HTTP files RFC 5861 Stale Cache-Control HTTP Cache-Control Extensions for Stale Content Two Cache-Control directives that let HTTP caches serve stale content while revalidating or when the origin fails. RFC 6573 The Item and Collection Link Relations Standard link types for connecting collections to their members RFC 6596 Canonical Link Relation The Canonical Link Relation A link tag to mark a page's preferred version when duplicates exist RFC 6694 about URI Scheme The "about" URI Scheme The about: address that browsers use to reach their own built-in pages, such as about:blank. RFC 7089 Memento HTTP Framework for Time-Based Access to Resource States -- Memento Access past versions of web pages through datetime negotiation. RFC 8594 Sunset Header The Sunset HTTP Header Field Announce when a web service or resource will shut down. RFC 8631 Web service link rels Link Relation Types for Web Services Standard link relation types to point clients to service documentation, descriptions, and status RFC 8959 secret-token URI The "secret-token" URI Scheme A URI scheme prefix that makes it easy to spot leaked authentication tokens in code. RFC 9659 Zstd Window Size Window Sizing for Zstandard Content Encoding A hard 8 MB window limit so zstd-compressed web content decodes everywhere. RFC 7232 HTTP Conditional Requests Hypertext Transfer Protocol (HTTP/1.1): Conditional Requests How HTTP clients ask 'only if it changed' and 'only if it is still the version I saw', using validators and preconditions. RFC 2518 WebDAV HTTP Extensions for Distributed Authoring -- WEBDAV HTTP extensions for editing, managing, and versioning web documents from remote clients. RFC 8941 Structured Fields Structured Field Values for HTTP A standard syntax for HTTP header and trailer field values. RFC 3205 HTTP substrate On the use of HTTP as a Substrate Advice on when and how to build a new protocol on top of HTTP, from ports and URLs to status codes. RFC 2732 Format for Literal IPv6 Addresses in URL's Square brackets let an IPv6 address sit inside a URL without its colons being misread. RFC 2756 HTCP Hyper Text Caching Protocol (HTCP/0.0) A protocol for web caches to discover each other and share information about cached content. RFC 4437 WebDAV redirects Web Distributed Authoring and Versioning (WebDAV) Redirect Reference Resources Signposts on a server that point clients to resources elsewhere. RFC 5842 WebDAV BIND Binding Extensions to Web Distributed Authoring and Versioning (WebDAV) Create multiple names for the same file, like aliases in a filesystem. RFC 7486 HOBA HTTP Origin-Bound Authentication (HOBA) Digital-signature-based HTTP authentication that replaces passwords RFC 8120 Mutual Auth for HTTP Mutual Authentication Protocol for HTTP Password authentication where client and server both prove they know the secret. RFC 8121 Mutual Authentication Protocol for HTTP: Cryptographic Algorithms Based on the Key Agreement Mechanism 3 (KAM3) Algorithms using discrete-logarithm and elliptic-curve groups for HTTP mutual authentication. RFC 7595 URI Scheme Guidelines Guidelines and Registration Procedures for URI Schemes The rules for inventing a new URI scheme such as http: and getting its name onto the official IANA list. RFC 7233 HTTP Range Requests Hypertext Transfer Protocol (HTTP/1.1): Range Requests Requesting and responding to partial content in HTTP/1.1. RFC 2069 HTTP Digest Auth An Extension to HTTP : Digest Access Authentication Authentication without sending passwords in the clear. RFC 1866 HTML 2.0 Hypertext Markup Language - 2.0 The language that structures content for web browsers. RFC 3230 Instance Digests in HTTP Standard checksums for the whole web file, not just the piece you received RFC 2227 HTTP Hit-Metering Simple Hit-Metering and Usage-Limiting for HTTP How web caches can report page-view counts to publishers, and how publishers can cap how often a cached copy is reused. RFC 2296 RVSA/1.0 HTTP Remote Variant Selection Algorithm -- RVSA/1.0 A formula for picking the best version of a web page on the server side. RFC 2935 IOTP over HTTP Internet Open Trading Protocol (IOTP) HTTP Supplement How the Internet Open Trading Protocol's XML messages are carried over HTTP 1.0 and 1.1. RFC 4156 wais URI scheme The wais URI Scheme How to write addresses for searching document databases with WAIS. RFC 4157 prospero URI scheme The prospero URI Scheme How to write addresses to access resources through the Prospero directory service. RFC 5538 news and nntp URIs The 'news' and 'nntp' URI Schemes How a link can point at a Usenet article or newsgroup, moved out of RFC 1738 so that RFC could retire. RFC 5954 SIP IPv6 ABNF fix Essential Correction for IPv6 ABNF and URI Comparison in RFC 3261 A fix for a faulty IPv6 grammar rule in SIP, plus a rule that URIs compare by binary address, not by spelling. RFC 5989 A SIP Event Package for Subscribing to Changes to an HTTP Resource How a SIP client asks to be told when a web resource is created, changed or deleted, instead of polling it. RFC 5995 WebDAV POST Add-Member Using POST to Add Members to Web Distributed Authoring and Versioning (WebDAV) Collections A way for a WebDAV server to say where clients can POST new files and let the server pick the name. RFC 6578 WebDAV Sync Collection Synchronization for Web Distributed Authoring and Versioning (WebDAV) A token-based report that lets WebDAV clients ask only what changed in a collection since last time. RFC 7639 ALPN HTTP Header The ALPN HTTP Header Field A header that lets an HTTP CONNECT request announce which application protocol will run inside the tunnel. RFC 8246 HTTP Immutable HTTP Immutable Responses A Cache-Control flag that tells browsers a fresh cached file will not change, so reloads can skip revalidation. RFC 9211 Cache-Status The Cache-Status HTTP Response Header Field A standard HTTP header that lets each cache report how it handled a request. RFC 9246 CDNI URI Signing URI Signing for Content Delivery Network Interconnection (CDNI) How a signed token inside a URL lets a content provider and a chain of CDNs agree on who may fetch what. RFC 9412 HTTP/3 ORIGIN The ORIGIN Extension in HTTP/3 Registers the HTTP/2 ORIGIN frame for HTTP/3 so servers can list the origins a connection covers. RFC 9532 Next-hop aliases HTTP Proxy-Status Parameter for Next-Hop Aliases A Proxy-Status parameter that lets a proxy report the full chain of DNS alias names it saw on the way to the next hop. RFC 9652 Link-Template Header The Link-Template HTTP Header Field An HTTP header that carries link templates, so clients can build links by filling in variables. RFC 9727 api-catalog api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs A well-known address where a website lists the APIs it offers, so software can find them without a human. RFC 9729 Concealed HTTP Auth The Concealed HTTP Authentication Scheme An HTTP login that stays invisible: servers never issue a challenge, so unauthenticated clients learn nothing. RFC 9842 Dictionary Transport Compression Dictionary Transport How a web server and a browser agree to compress a new response against an older one they both already have. RFC 2718 Guidelines for new URL Schemes A how-to guide for defining the syntax and semantics of new URL schemes. RFC 7615 HTTP Authentication-Info HTTP Authentication-Info and Proxy-Authentication-Info Response Header Fields Response headers for authentication schemes to return server information after credentials are accepted. RFC 5987 Character Set and Language Encoding for Hypertext Transfer Protocol (HTTP) Header Field Parameters Encoding non-ASCII characters and language info in HTTP headers RFC 2965 Cookies v2 HTTP State Management Mechanism A second attempt at HTTP state management using Set-Cookie2 and Cookie headers. RFC 7538 HTTP 308 The Hypertext Transfer Protocol Status Code 308 (Permanent Redirect) A permanent redirect that keeps the request method unchanged. RFC 2109 Cookies Original HTTP State Management Mechanism The standard mechanism for servers to store state on clients across multiple HTTP requests. RFC 2388 multipart/form-data Returning Values from Forms: multipart/form-data A standard way to encode forms and file uploads for web applications. RFC 8740 TLS 1.3 with HTTP/2 Using TLS 1.3 with HTTP/2 Forbids servers from asking for client certificates mid-conversation over HTTP/2. RFC 2936 HTTP MIME Type Handler Detection Methods to detect MIME types supported by a user's browser RFC 3875 CGI The Common Gateway Interface (CGI) Version 1.1 How web servers run helper programs and pass them request data. RFC 4169 Digest AKA v2 Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) Version-2 A stronger HTTP authentication method using mobile phone credentials. RFC 4229 HTTP Header Field Registrations The official register of HTTP header field names. RFC 4709 Mounting WebDAV Mounting Web Distributed Authoring and Versioning (WebDAV) Servers A way to open WebDAV servers directly from browser links using a special file format RFC 6579 Disclosure Link Relation The 'disclosure' Link Relation Type A link type that points to intellectual property disclosures. RFC 6861 create-form / edit-form The "create-form" and "edit-form" Link Relations Two standard link names for web forms that create or edit resources. RFC 6892 The 'describes' Link Relation Type The 'describes' link relation type for web resources. RFC 6896 SCS SCS: KoanLogic's Secure Cookie Sessions for HTTP Encrypting and signing HTTP cookies so the browser carries secure state. RFC 6903 Additional Link Relation Types Five new names for describing how web resources relate to each other. RFC 7236 HTTP Auth Schemes Initial Hypertext Transfer Protocol (HTTP) Authentication Scheme Registrations Registry entries for HTTP authentication mechanisms RFC 7237 HTTP Method Registry Initial Hypertext Transfer Protocol (HTTP) Method Registrations Registers HTTP methods in the IANA method registry. RFC 8565 HTJP Hypertext Jeopardy Protocol (HTJP/1.0) The web protocol where you send answers and the server provides the questions. RFC 8574 cite-as Link Relation cite-as: A Link Relation to Convey a Preferred URI for Referencing A link relation to convey a preferred URI for permanent reference RFC 8674 Safe HTTP preference The "safe" HTTP Preference A browser can politely ask a website for family-friendly content. RFC 9440 Client-Cert Header Client-Cert HTTP Header Field Passing client certificate information through a reverse proxy in HTTP. RFC 2070 HTML i18n Internationalization of the Hypertext Markup Language Extending HTML to support every language and writing system in the world. RFC 2145 Use and Interpretation of HTTP Version Numbers Rules for how implementations of different HTTP versions can work together. RFC 7284 The Profile URI Registry An IANA registry for profile URIs used in Internet protocols and data formats. RFC 4395 URI Scheme Guidelines Guidelines and Registration Procedures for New URI Schemes How to design and register new web address prefixes RFC 2717 Registration Procedures for URL Scheme Names How to officially register a new URL scheme name. RFC 3305 URIs, URLs and URNs Report from the Joint W3C/IETF URI Planning Interest Group: Uniform Resource Identifiers (URIs), URLs, and Uniform Resource Names (URNs): Clarifications and Recommendations A planning group's attempt to untangle what URI, URL and URN mean and how schemes and namespaces get registered. RFC 7694 Accept-Encoding Reply Hypertext Transfer Protocol (HTTP) Client-Initiated Content-Encoding Letting servers tell clients which request compression methods they accept RFC 4316 WebDAV datatypes Datatypes for Web Distributed Authoring and Versioning (WebDAV) Properties Adding datatypes to WebDAV property values so servers can interpret them correctly. RFC 7804 HTTP SCRAM Salted Challenge Response HTTP Authentication Mechanism Challenge-response authentication that never exposes your password. RFC 8053 HTTP Interactive Auth HTTP Authentication Extensions for Interactive Clients Extensions for HTTP authentication to support modern web applications. RFC 8673 HTTP live range HTTP Random Access and Live Content HTTP range requests that start at any byte and continue indefinitely as new content is appended, for streaming and live data. RFC 8942 Client Hints HTTP Client Hints Enabling servers to explicitly request client characteristics without passive fingerprinting RFC 9163 Expect-CT Expect-CT Extension for HTTP HTTP header for Certificate Transparency compliance monitoring RFC 7936 WebSocket Subprotocols Clarifying Registry Procedures for the WebSocket Subprotocol Name Registry Clarifying rules for registering WebSocket subprotocol names. RFC 9745 Deprecation header The Deprecation HTTP Response Header Field Signal to API clients that a resource will or has been deprecated RFC 7238 308 Permanent Redirect The Hypertext Transfer Protocol Status Code 308 (Permanent Redirect) A redirection status code that preserves the HTTP request method. RFC 2774 An HTTP Extension Framework A standard way to add protocol extensions to HTTP.