RFC 9931 - Security Considerations for Optimistic Protocol Transitions in HTTP/1.1

• Status: Proposed Standard
• Published: March 2026
• Stream: IETF
• Updates: RFC 9112, RFC 9298
• Errata: No Errata

Abstract

RFC 9931 descrive le security considerations per dati inviati in modo optimistic prima della conferma di un HTTP/1.1 protocol transition. Aggiorna RFC 9112 e RFC 9298 con requirements pensati per evitare request smuggling e problemi di sicurezza correlati.

Contents

• 1. Overview
• 2. Requirements Language
• 3. Background
• 4. Possible Security Issues
• 5. Operational Issues
• 6. Impact on HTTP Upgrade with Existing Upgrade Tokens
• 7. Guidance for Future Upgrade Tokens
• 8. Requirements for HTTP CONNECT
• 9. Security Considerations
• 10. IANA Considerations
• 11. References
• Acknowledgments
• Author's Address

Related Resources

• Official Text: RFC 9931
• Official Page: RFC 9931 DataTracker
• Errata: RFC Editor Errata