guide

HTTP resources and specifications

HTTP was first specified in the early 1990s. Designed with extensibility in mind, it has seen numerous additions over the years; this lead to its specification being scattered through numerous specification documents (in the midst of experimental abandoned extensions). This page lists relevant resources about HTTP.

Specification	Title	Status
`9110`	HTTP Semantics	Internet Standard
`9111`	HTTP Caching	Internet Standard
`9112`	HTTP/1.1	Internet Standard
`9113`	HTTP/2	Proposed Standard
`9114`	HTTP/3	Proposed Standard
`5861`	HTTP Cache-Control Extensions for Stale Content	Informational
`8246`	HTTP Immutable Responses	Proposed Standard
`6265`	HTTP State Management Mechanism Defines Cookies	Proposed Standard
Draft spec	Cookie Prefixes	IETF Draft
Draft spec	Same-Site Cookies	IETF Draft
Draft spec	Deprecate modification of ‘secure’ cookies from non-secure origins	IETF Draft
`2145`	Use and Interpretation of HTTP Version Numbers	Informational
`6585`	Additional HTTP Status Codes	Proposed Standard
`7725`	An HTTP Status Code to Report Legal Obstacles	On the standard track
`2397`	The “data” URL scheme	Proposed Standard
`3986`	Uniform Resource Identifier (URI): Generic Syntax	Internet Standard
`5988`	Web Linking Defines the `Link` header	Proposed Standard
Draft spec	HTTP Client Hints	IETF Draft
`7578`	Returning Values from Forms: multipart/form-data	Proposed Standard
`6266`	Use of the Content-Disposition Header Field in the Hypertext Transfer Protocol (HTTP)	Proposed Standard
`2183`	Communicating Presentation Information in Internet Messages: The Content-Disposition Header Field Only a subset of syntax of the `Content-Disposition` header can be used in the context of HTTP messages.	Proposed Standard
`7239`	Forwarded HTTP Extension	Proposed Standard
`6455`	The WebSocket Protocol	Proposed Standard
`5246`	The Transport Layer Security (TLS) Protocol Version 1.2 This specification has been modified by subsequent RFCs, but these modifications have no effect on the HTTP protocol.	Proposed Standard
`8446`	The Transport Layer Security (TLS) Protocol Version 1.3 Supersedes TLS 1.2.	Proposed Standard
`2817`	Upgrading to TLS Within HTTP/1.1	Proposed Standard
`7541`	HPACK: Header Compression for HTTP/2	On the standard track
`7838`	HTTP Alternative Services	On the standard track
`7301`	Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension Used to negotiate HTTP/2 at the transport to save an extra request/response round trip.	Proposed Standard
`6454`	The Web Origin Concept	Proposed Standard
Fetch	Cross-Origin Resource Sharing	Living Standard
`7034`	HTTP Header Field X-Frame-Options	Informational
`6797`	HTTP Strict Transport Security (HSTS)	Proposed Standard
Upgrade Insecure Requests	Upgrade Insecure Requests	Candidate Recommendation
Content Security Policy specification	Content Security Policy Level 3	Obsolete
Microsoft document	Specifying legacy document modes* Defines X-UA-Compatible	Note
`5689`	HTTP Extensions for Web Distributed Authoring and Versioning (WebDAV) These extensions of the Web, as well as CardDAV and CalDAV, are out-of-scope for HTTP on the Web. Modern APIs for application are defines using the RESTful pattern nowadays.	Proposed Standard
`2324`	Hyper Text Coffee Pot Control Protocol (HTCPCP/1.0)	April 1st joke spec
`7168`	The Hyper Text Coffee Pot Control Protocol for Tea Efflux Appliances (HTCPCP-TEA)	April 1st joke spec
HTML Living Standard	HTML Defines extensions of HTTP for Server-Sent Events	Living Standard
Reporting API	`Report-To` header	Draft
Draft spec	Expect-CT Extension for HTTP	IETF Draft
`7486`	HTTP Origin-Bound Auth (HOBA)	Experimental
`7240`	Prefer Header for HTTP	Proposed Standard