News World That's Worth

IETF Ratifies RFC 10008: 'HTTP QUERY' Becomes the First New Official HTTP Method in Over Two Keys The Internet Engineering Task Force ( IETF ) has officially published RFC 10008 , formalizing the HTTP QUERY method as the 9th official command in the HTTP protocol suite. Architected to optimize data retrieval, the QUERY method operates similarly to a traditional GET request but introduces a critical structural shift: it allows complex query parameters to be encapsulated directly within the request body rather than appending them to the URL string, effectively eliminating URL length constraints. The official history of HTTP methods has remained remarkably conservative over the decades: 1997 (RFC 2068): The first official HTTP/1.1 specification defined 7 core methods : OPTIONS , GET , HEAD , POST , PUT , DELETE , and TRACE . 1999 (RFC 2616): The core suite expanded to 8 with the introduction of the CONNECT method. 2022 (RFC 9110): Despite comprehensive modernization overha...

  The Death of Network Snooping: IETF Ratifies RFC 9849 for TLS Encrypted Client Hello (ECH) The IETF (Internet Engineering Task Force) has officially released RFC 9849 , standardizing TLS Encrypted Client Hello (ECH) . This milestone, which has been under development since 2018, effectively plugs the last remaining leak in internet privacy, preventing firewalls and network administrators from monitoring the specific domains a user is visiting. Eliminating the "Domain Leak" In a traditional internet connection, a Service Provider (ISP) only needs to know the destination IP address to route traffic. However, many networks utilize firewalls or deep packet inspection (DPI) to gain granular insights into user behavior. Even with the widespread adoption of HTTPS/TLS encryption, one critical vulnerability remained: the Client Hello packet. During the initial "handshake" of a connection, the domain name (Server Name Indication or SNI) was transmitted in plain text, allo...