MDN / HTTP resources and specifications
MDN / HTTP resources and specifications
HTTP was first specified in the early 1990s. Designed with extensibility in mind, it has seen numerous additions over the years; this lead to its specification being scattered through numerous specification documents (in the midst of experimental abandoned extensions). This page lists relevant resources about HTTP.
SpecificationTitleStatusHTTP SemanticsInternet StandardHTTP CachingInternet StandardHTTP/1.1Internet StandardHTTP/2Proposed StandardHTTP/3Proposed StandardHTTP Cache-Control Extensions for Stale ContentInformationalHTTP Immutable ResponsesProposed StandardHTTP State Management Mechanism Defines CookiesProposed StandardDraft specCookie PrefixesIETF DraftDraft specSame-Site CookiesIETF DraftDraft specDeprecate modification of ‘secure’ cookies from non-secure originsIETF DraftUse and Interpretation of HTTP Version NumbersInformationalAdditional HTTP Status CodesProposed StandardAn HTTP Status Code to Report Legal ObstaclesOn the standard trackThe “data” URL schemeProposed StandardUniform Resource Identifier (URI): Generic SyntaxInternet StandardWeb Linking Defines the headerProposed StandardDraft specHTTP Client HintsIETF DraftReturning Values from Forms: multipart/form-dataProposed StandardUse of the Content-Disposition Header Field in the Hypertext Transfer Protocol (HTTP)Proposed StandardCommunicating Presentation Information in Internet Messages: The Content-Disposition Header Field Only a subset of syntax of the header can be used in the context of HTTP messages.Proposed StandardForwarded HTTP ExtensionProposed StandardThe WebSocket ProtocolProposed StandardThe Transport Layer Security (TLS) Protocol Version 1.2 This specification has been modified by subsequent RFCs, but these modifications have no effect on the HTTP protocol.Proposed StandardThe Transport Layer Security (TLS) Protocol Version 1.3 Supersedes TLS 1.2.Proposed StandardUpgrading to TLS Within HTTP/1.1Proposed StandardHPACK: Header Compression for HTTP/2On the standard trackHTTP Alternative ServicesOn the standard trackTransport Layer Security (TLS) Application-Layer Protocol Negotiation Extension Used to negotiate HTTP/2 at the transport to save an extra request/response round trip.Proposed StandardThe Web Origin ConceptProposed StandardFetchCross-Origin Resource SharingLiving StandardHTTP Header Field X-Frame-OptionsInformationalHTTP Strict Transport Security (HSTS)Proposed StandardUpgrade Insecure RequestsUpgrade Insecure RequestsCandidate RecommendationContent Security Policy specificationContent Security Policy Level 3ObsoleteMicrosoft documentSpecifying legacy document modes* Defines X-UA-CompatibleNoteHTTP Extensions for Web Distributed Authoring and Versioning (WebDAV) These extensions of the Web, as well as CardDAV and CalDAV, are out-of-scope for HTTP on the Web. Modern APIs for application are defines using the RESTful pattern nowadays.Proposed StandardHyper Text Coffee Pot Control Protocol (HTCPCP/1.0)April 1st joke specThe Hyper Text Coffee Pot Control Protocol for Tea Efflux Appliances (HTCPCP-TEA)April 1st joke specHTML Living StandardHTML Defines extensions of HTTP for Server-Sent EventsLiving StandardReporting APIReport-To headerDraftDraft specExpect-CT Extension for HTTPIETF DraftHTTP Origin-Bound Auth (HOBA)ExperimentalPrefer Header for HTTPProposed Standard