Skip to main content

The HTTP QUERY Method
draft-ietf-httpbis-safe-method-w-body-14

Revision differences

Document history

Date Rev. By Action
2026-06-15
14 (System) Updated while publishing rfc10008 (changed state to RFC, created became rfc relationship between draft-ietf-httpbis-safe-method-w-body and RFC 10008, changed IESG state to RFC Published)
2026-06-15
14 (System) RPC status changed to publisher from final_review_editor
2026-06-04
14 (System) RPC status changed to final_review_editor from second_editor
2026-05-20
14 (System) RPC status changed to second_editor
2026-05-20
14 (System) RFC Editor state changed to In Progress from RFC-EDITOR
2026-04-23
14 (System) RFC Editor state changed to RFC-EDITOR from EDIT
2025-12-04
14 Barry Leiba Closed request for IETF Last Call review by ARTART with state 'Overtaken by Events': Document has finished IESG processing
2025-12-04
14 Barry Leiba Assignment of request for IETF Last Call review by ARTART to Carsten Bormann was marked no-response
2025-12-01
14 (System) IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor
2025-12-01
14 (System) IANA Action state changed to Waiting on RFC Editor from In Progress
2025-12-01
14 (System) IANA Action state changed to In Progress from Waiting on Authors
2025-11-21
14 Tero Kivinen Closed request for IETF Last Call review by SECDIR with state 'Overtaken by Events'
2025-11-21
14 Tero Kivinen Assignment of request for IETF Last Call review by SECDIR to Derek Atkins was marked no-response
2025-11-21
14 (System) IANA Action state changed to Waiting on Authors from In Progress
2025-11-21
14 (System) IANA Action state changed to In Progress
2025-11-21
14 (System) RFC Editor state changed to EDIT from AUTH
2025-11-20
14 (System) RFC Editor state changed to AUTH from EDIT
2025-11-20
14 (System) RFC Editor state changed to EDIT
2025-11-20
14 (System) IESG state changed to RFC Ed Queue from Approved-announcement sent
2025-11-20
14 (System) Announcement was received by RFC Editor
2025-11-20
14 Liz Flynn IESG state changed to Approved-announcement sent from Approved-announcement to be sent
2025-11-20
14 Liz Flynn IESG has approved the document
2025-11-20
14 Liz Flynn Closed "Approve" ballot
2025-11-20
14 Liz Flynn Ballot approval text was generated
2025-11-20
14 (System) Removed all action holders (IESG state changed)
2025-11-20
14 Morgan Condie IESG state changed to Approved-announcement to be sent from IESG Evaluation
2025-11-19
14 Orie Steele [Ballot Position Update] New position, Yes, has been recorded for Orie Steele
2025-11-19
14 Amanda Baber IANA Review state changed to IANA OK - Actions Needed from Version Changed - Review Needed
2025-11-19
14 Éric Vyncke
[Ballot comment]
Thanks for the work done in this document, it is easy to read and could be useful indeed.

Probably because I am far …
[Ballot comment]
Thanks for the work done in this document, it is easy to read and could be useful indeed.

Probably because I am far from being an HTTP expert, I fail to spot the expected behaviour of a server that receives a non-idempotent QUERY ? (i.e., the client MUST use a POST and not a QUERY)

-éric
2025-11-19
14 Éric Vyncke [Ballot Position Update] New position, No Objection, has been recorded for Éric Vyncke
2025-11-18
14 Andy Newton [Ballot Position Update] New position, No Objection, has been recorded for Andy Newton
2025-11-18
14 Mohamed Boucadair
[Ballot comment]
Hi Julian, James, and Mike,

The changes made in -14 [1] look good.

Thank you for the discussion and for taking care of …
[Ballot comment]
Hi Julian, James, and Mike,

The changes made in -14 [1] look good.

Thank you for the discussion and for taking care of the previous review [2].

Cheers,
Med

[1] https://author-tools.ietf.org/iddiff?url2=draft-ietf-httpbis-safe-method-w-body-14

[2] https://lists.w3.org/Archives/Public/ietf-http-wg/2025OctDec/0185.html
2025-11-18
14 Mohamed Boucadair [Ballot Position Update] Position for Mohamed Boucadair has been changed to Yes from Discuss
2025-11-18
14 (System) IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed
2025-11-18
14 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-14.txt
2025-11-18
14 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2025-11-18
14 Julian Reschke Uploaded new revision
2025-11-18
13 Ketan Talaulikar [Ballot Position Update] New position, No Objection, has been recorded for Ketan Talaulikar
2025-11-17
13 Paul Wouters [Ballot Position Update] New position, No Objection, has been recorded for Paul Wouters
2025-11-17
13 Gunter Van de Velde [Ballot comment]
I found this draft well written and enjoyable to read. Thank you for creating this work
2025-11-17
13 Gunter Van de Velde [Ballot Position Update] New position, No Objection, has been recorded for Gunter Van de Velde
2025-11-17
13 Jim Guichard [Ballot Position Update] New position, No Objection, has been recorded for Jim Guichard
2025-11-17
13 Mohamed Boucadair
[Ballot discuss]
Hi Julian, James, and Mike,

Thank you for the effort put into this specification. Great to see this feature progressing in the standardization …
[Ballot discuss]
Hi Julian, James, and Mike,

Thank you for the effort put into this specification. Great to see this feature progressing in the standardization process. I’m always impressed by the perseverance and sustained effort required to push an extension over a decade. Also, interesting to see that a similar feature was standardized in CoAP (FETCH method) since 2017.

The document is well-written with the design motivation and approach well-articulated.

Thanks to Mark for clarifying the language use for code errors.

# URI

Section 2.4 says:
  A server can assign a URI to the equivalent resource (Section 2.2) of
  a QUERY request. 

Section 4:
  If a server creates a temporary resource to represent the results of
  a QUERY request (e.g., for use in the Location or Content-Location
  field) and the request contains sensitive information that cannot be
  logged, then the URI of this resource SHOULD be chosen such that it
  does not include any sensitive portions of the original request
  content.

## Unless I’m missing something, the second except assumes that a URI is always assigned which seems to contradict the text in 2.4.

## Please move [URI] to be listed as normative.
2025-11-17
13 Mohamed Boucadair
[Ballot comment]
# Please consider adding some few words about how QUERY differs from the SEARCH method (RFC5323).

# Caching/Server Operational considerations

## …
[Ballot comment]
# Please consider adding some few words about how QUERY differs from the SEARCH method (RFC5323).

# Caching/Server Operational considerations

## The specification clearly indicates that caching considerations are more complex compared to other methods. However, it seems to me that some proposed optimizations require content format awareness by cache elements and thus imposes some deployment constraints. There might be implications on the dimensioning of the cache and server infrastructures. It would be useful to record such matters in a dedicated “Operational Considerations” section. If there are readily-available studies on these matters, these would be useful to cite as informative references.

## The caching efficiency may also depend on the order used in the parameters enclosed in the QUERY payload. I think the text should at least recommend that, independent of the format type, the same order is preserved by a client when it re-does the same query?

## Maybe worth calling out that complicated query payloads may consume more server resources. Policies/configuration are expected to be provided to servers to control allowed operations to prevent operational effects of random queries.

# Private agreements

RFC9110 has the following for GET:

  An origin server SHOULD
  NOT rely on private agreements to receive content, since participants
  in HTTP communication are often unaware of intermediaries along the
  request chain.

Would that caution be needed for QUERY?

# Error Codes

## Content Negotiation (2.1)

What if the query instructions are not valid?

Can the text cite, for example, 422 (Unprocessable Content) and 413 (Content Too Large) as they seem to be relevant for QUERY?

## Applicability of POST exceptions

Given that we indicate the non-applicability for redirect matters vs. POST in, e.g.,

CURRENT:
  Note that the exceptions for redirecting a POST as a GET request
  after a 301 or 302 response do not apply to QUERY requests.

and that RFC9110 says:
  appropriate status code depending on the result of processing the
  POST request; almost all of the status codes defined by this
  specification could be received in a response to POST (the exceptions
  being 206 (Partial Content), 304 (Not Modified), and 416 (Range Not
  Satisfiable)).

I wonder whether we can call out restriction or lack of restriction with regards to the applicability of error codes for QUERY.

# Future request

CURRENT (2.4):

  This resource's
  URI might be temporary; if a future request fails, the client can
  retry using the original QUERY request target and the previously
  submitted content.

Do we mean future request with that URI as request URI? Please update the text for better clarity.

# nits

## Abstract: these are distinct properties

OLD: safe/idempotent manner

NEW: safe and idempotent manner

## Introduction: too voluminous

I think the flow of this part can be made better by avoid redundant statement. For example:

OLD:
  Most often, this is desirable when the data conveyed in a request is
  too voluminous to be encoded into the request's URI.  A common query
  pattern is:

  GET /feed?q=foo&limit=10&sort=-published HTTP/1.1
  Host: example.org

  However, when the data conveyed is too voluminous to be encoded in
  the request's URI, this pattern becomes problematic:

NEW:
  A common query pattern with a GET method is:

  GET /feed?q=foo&limit=10&sort=-published HTTP/1.1
  Host: example.org

  However, when the data conveyed is too voluminous to be encoded in
  the request's URI, this pattern becomes problematic:

Cheers,
Med
2025-11-17
13 Mohamed Boucadair Ballot comment and discuss text updated for Mohamed Boucadair
2025-11-16
13 Mohamed Boucadair
[Ballot discuss]
Hi Julian, James, and Mike,

Thank you for the effort put into this specification. Great to see this feature progressing in the standardization …
[Ballot discuss]
Hi Julian, James, and Mike,

Thank you for the effort put into this specification. Great to see this feature progressing in the standardization process. I’m always impressed by the perseverance and sustained effort required to push an extension over a decade. Also, interesting to see that a similar feature was standardized in CoAP (FETCH method) since 2017.

The document is well-written with the design motivation and approach well-articulated.

Please find below few DISCUSS points:

# Unlike 9110 which uses a clear language about the expected error codes, the specification is ambiguous (for some aspects) for a PS document. The document uses “can” in many places while I think a better clarity is needed. For example,

CURRENT:
  *  If a media type is specified, but is inconsistent with the actual
      request content, a 400 (Bad Request) can be returned.  That is, a
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      server is not allowed to infer a media type from the request
      content and then override a missing or "erroneous" value ("content
      sniffing").

  *  If the media type is specified, is understood, and the content is
      indeed consistent with the type, but the query cannot be processed
      due to the actual contents of the query, the status 422
      (Unprocessable Content) can be used.  An example would be a
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      syntactically correct SQL query that identifies a non-existent
      table.

Or

  A server can assign a URI to the equivalent resource (Section 2.2) of
            ^^^^^^^^^^^^
  a QUERY request.  If the server does so, the URI of that resource can
                                                                    ^^^
  be included in the Location header field of the 2xx response (see
  ^^
  Section 10.2.2 of [HTTP]).

Any reason why a less ambiguous language (e.g., normative language) is not used here (and other similar parts of the spec)?

# URI

Section 2.4 says:
  A server can assign a URI to the equivalent resource (Section 2.2) of
  a QUERY request. 

Section 4:
  If a server creates a temporary resource to represent the results of
  a QUERY request (e.g., for use in the Location or Content-Location
  field) and the request contains sensitive information that cannot be
  logged, then the URI of this resource SHOULD be chosen such that it
  does not include any sensitive portions of the original request
  content.

## Unless I’m missing something, the second except assumes that a URI is always assigned which seems to contradict the text in 2.4.

## Please move [URI] to be listed as normative.
2025-11-16
13 Mohamed Boucadair
[Ballot comment]
# Please consider adding some few words about how QUERY differs from the SEARCH method (RFC5323).

# Caching/Server Operational considerations

## …
[Ballot comment]
# Please consider adding some few words about how QUERY differs from the SEARCH method (RFC5323).

# Caching/Server Operational considerations

## The specification clearly indicates that caching considerations are more complex compared to other methods. However, it seems to me that some proposed optimizations require content format awareness by cache elements and thus imposes some deployment constraints. There might be implications on the dimensioning of the cache and server infrastructures. It would be useful to record such matters in a dedicated “Operational Considerations” section. If there are readily-available studies on these matters, these would be useful to cite as informative references.

## The caching efficiency may also depend on the order used in the parameters enclosed in the QUERY payload. I think the text should at least recommend that, independent of the format type, the same order is preserved by a client when it re-does the same query?

## Maybe worth calling out that complicated query payloads may consume more server resources. Policies/configuration are expected to be provided to servers to control allowed operations to prevent operational effects of random queries.

# Error Codes

## Content Negotiation (2.1)

What if the query instructions are not valid?

Can the text cite, for example, Can 422 (Unprocessable Content) and 413 (Content Too Large) as they seem to be relevant for QUERY?

## Applicability of POST exceptions

Given that we indicate the non-applicability for redirect matters vs. POST in, e.g.,

CURRENT:
  Note that the exceptions for redirecting a POST as a GET request
  after a 301 or 302 response do not apply to QUERY requests.

and that RFC9110 says:
  appropriate status code depending on the result of processing the
  POST request; almost all of the status codes defined by this
  specification could be received in a response to POST (the exceptions
  being 206 (Partial Content), 304 (Not Modified), and 416 (Range Not
  Satisfiable)).

I wonder whether we can call out restriction or lack of restriction with regards to the applicability of error codes for QUERY.

# Future request

CURRENT (2.4):

  This resource's
  URI might be temporary; if a future request fails, the client can
  retry using the original QUERY request target and the previously
  submitted content.

Do we mean future request with that URI as request URI? Please update the text for better clarity.

# nits

## Abstract: these are distinct properties

OLD: safe/idempotent manner

NEW: safe and idempotent manner

## Introduction: too voluminous

I think the flow of this part can be made better by avoid redundant statement. For example:

OLD:
  Most often, this is desirable when the data conveyed in a request is
  too voluminous to be encoded into the request's URI.  A common query
  pattern is:

  GET /feed?q=foo&limit=10&sort=-published HTTP/1.1
  Host: example.org

  However, when the data conveyed is too voluminous to be encoded in
  the request's URI, this pattern becomes problematic:

NEW:
  A common query pattern with a GET method is:

  GET /feed?q=foo&limit=10&sort=-published HTTP/1.1
  Host: example.org

  However, when the data conveyed is too voluminous to be encoded in
  the request's URI, this pattern becomes problematic:

Cheers,
Med
2025-11-16
13 Mohamed Boucadair [Ballot Position Update] New position, Discuss, has been recorded for Mohamed Boucadair
2025-11-16
13 Roman Danyliw [Ballot comment]
Thank you to Paul Kyzivat for the GENART review.
2025-11-16
13 Roman Danyliw [Ballot Position Update] New position, No Objection, has been recorded for Roman Danyliw
2025-11-15
13 Deb Cooley [Ballot Position Update] New position, No Objection, has been recorded for Deb Cooley
2025-11-14
13 Erik Kline [Ballot Position Update] New position, Yes, has been recorded for Erik Kline
2025-11-14
13 (System) IANA Review state changed to IANA OK - Actions Needed from Version Changed - Review Needed
2025-11-14
13 Mike Bishop [Ballot comment]
I am an editor on this draft.
2025-11-14
13 Mike Bishop [Ballot Position Update] New position, Recuse, has been recorded for Mike Bishop
2025-11-14
13 Gorry Fairhurst Placed on agenda for telechat - 2025-11-20
2025-11-14
13 Gorry Fairhurst IESG state changed to IESG Evaluation from In Last Call
2025-11-14
13 Gorry Fairhurst Ballot has been issued
2025-11-14
13 Gorry Fairhurst [Ballot Position Update] New position, Yes, has been recorded for Gorry Fairhurst
2025-11-14
13 Gorry Fairhurst Created "Approve" ballot
2025-11-14
13 Gorry Fairhurst IESG state changed to In Last Call from Waiting for AD Go-Ahead
2025-11-14
13 (System) IANA Review state changed to Version Changed - Review Needed from IANA - Not OK
2025-11-14
13 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-13.txt
2025-11-14
13 (System) New version approved
2025-11-14
13 (System) Request for posting confirmation emailed to previous authors: James Snell , Julian Reschke , Mike Bishop
2025-11-14
13 Julian Reschke Uploaded new revision
2025-11-12
12 (System) IESG state changed to Waiting for AD Go-Ahead from In Last Call
2025-11-12
12 David Dong
IESG/Authors/WG Chairs:

IANA has completed its review of draft-ietf-httpbis-safe-method-w-body-12. If any part of this review is inaccurate, please let us know.

IANA understands that, upon …
IESG/Authors/WG Chairs:

IANA has completed its review of draft-ietf-httpbis-safe-method-w-body-12. If any part of this review is inaccurate, please let us know.

IANA understands that, upon approval of this document, there are two actions which we must complete.

First, in the Hypertext Transfer Protocol (HTTP) Method Registry located at:

https://www.iana.org/assignments/http-methods/

a single new method will be registered as follows:

Method Name: QUERY
Safe: Yes
Idempotent: Yes
Reference: [ RFC-to-be; Section 2 ]

Second, in the Hypertext Transfer Protocol (HTTP) Field Name Registry located at:

https://www.iana.org/assignments/http-fields/

a single new field name will be registered as follows:

Field Name: Accept-Query
Status: permanent
Structured Type: List
Reference: [ RFC-to-be; Section 3 ]
Comments:

As this document requests a registration in an Expert Review or Specification Required (see RFC 8126) registry, we will initiate the required Expert Review via a separate request. This review must be completed before the document's IANA state can be changed to "IANA OK."

We understand that these are the only actions required to be completed upon approval of this document.

NOTE: The actions requested in this document will not be completed until the document has been approved for publication as an RFC. This message is meant only to confirm the list of actions that will be performed.

For definitions of IANA review states, please see:

https://datatracker.ietf.org/help/state/draft/iana-review

Thank you,

David Dong
IANA Services Sr. Specialist
2025-11-12
12 (System) IANA Review state changed to IANA - Not OK from IANA - Review Needed
2025-11-11
12 Barry Leiba Request for IETF Last Call review by ARTART is assigned to Carsten Bormann
2025-11-11
12 Todd Herr Assignment of request for IETF Last Call review by ARTART to Todd Herr was rejected
2025-11-02
12 Paul Kyzivat Request for IETF Last Call review by GENART Completed: Ready. Reviewer: Paul Kyzivat.
2025-10-28
12 Barry Leiba Request for IETF Last Call review by ARTART is assigned to Todd Herr
2025-10-28
12 Barry Leiba Assignment of request for IETF Last Call review by ARTART to Paul Kyzivat was rejected
2025-10-27
12 Barry Leiba Request for IETF Last Call review by ARTART is assigned to Paul Kyzivat
2025-10-23
12 Tero Kivinen Request for IETF Last Call review by SECDIR is assigned to Derek Atkins
2025-10-23
12 Jean Mahoney Request for IETF Last Call review by GENART is assigned to Paul Kyzivat
2025-10-22
12 Mark Nottingham
# Document Shepherd Write-Up for Group Documents

*This version is dated 4 July 2022.*

Thank you for your service as a document shepherd. Among the …
# Document Shepherd Write-Up for Group Documents

*This version is dated 4 July 2022.*

Thank you for your service as a document shepherd. Among the responsibilities is
answering the questions in this write-up to give helpful context to Last Call
and Internet Engineering Steering Group ([IESG][1]) reviewers, and your
diligence in completing it is appreciated. The full role of the shepherd is
further described in [RFC 4858][2]. You will need the cooperation of the authors
and editors to complete these checks.

Note that some numbered items contain multiple related questions; please be sure
to answer all of them.

## Document History

1. Does the working group (WG) consensus represent the strong concurrence of a
  few individuals, with others being silent, or did it reach broad agreement?

This draft was extensively discussed over a long period of time, and has had diverse input.

2. Was there controversy about particular points, or were there decisions where
  the consensus was particularly rough?

Not particularly.

3. Has anyone threatened an appeal or otherwise indicated extreme discontent? If
  so, please summarize the areas of conflict in separate email messages to the
  responsible Area Director. (It should be in a separate email because this
  questionnaire is publicly available.)

No.

4. For protocol documents, are there existing implementations of the contents of
  the document? Have a significant number of potential implementers indicated
  plans to implement? Are any existing implementations reported somewhere,
  either in the document itself (as [RFC 7942][3] recommends) or elsewhere
  (where)?

No. This is a new semantic protocol element, so implementation is a bit 'chicken and egg' -- people don't want to implement until it's blessed as a standard.

## Additional Reviews

5. Do the contents of this document closely interact with technologies in other
  IETF working groups or external organizations, and would it therefore benefit
  from their review? Have those reviews occurred? If yes, describe which
  reviews took place.

It has been exposed to W3C and WHATWG folks.

There was a detailed httpdir review by Roy Fielding, after which the I-D was revised, and WGLC'ed to confirm these changes.

6. Describe how the document meets any required formal expert review criteria,
  such as the MIB Doctor, YANG Doctor, media type, and URI type reviews.

N/A.

7. If the document contains a YANG module, has the final version of the module
  been checked with any of the [recommended validation tools][4] for syntax and
  formatting validation? If there are any resulting errors or warnings, what is
  the justification for not fixing them at this time? Does the YANG module
  comply with the Network Management Datastore Architecture (NMDA) as specified
  in [RFC 8342][5]?

No/yAng.

8. Describe reviews and automated checks performed to validate sections of the
  final version of the document written in a formal language, such as XML code,
  BNF rules, MIB definitions, CBOR's CDDL, etc.

N/A.

## Document Shepherd Checks

9. Based on the shepherd's review of the document, is it their opinion that this
  document is needed, clearly written, complete, correctly designed, and ready
  to be handed off to the responsible Area Director?

Yes.

10. Several IETF Areas have assembled [lists of common issues that their
    reviewers encounter][6]. For which areas have such issues been identified
    and addressed? For which does this still need to happen in subsequent
    reviews?

The impact of this draft is relatively contained to the areas that the HTTP WG usually operates within; we have discussed security and operability aspects of the method as part of WG discussion.

11. What type of RFC publication is being requested on the IETF stream ([Best
    Current Practice][12], [Proposed Standard, Internet Standard][13],
    [Informational, Experimental or Historic][14])? Why is this the proper type
    of RFC? Do all Datatracker state attributes correctly reflect this intent?

PS. As a HTTP method definition, this is required.

12. Have reasonable efforts been made to remind all authors of the intellectual
    property rights (IPR) disclosure obligations described in [BCP 79][7]? To
    the best of your knowledge, have all required disclosures been filed? If
    not, explain why. If yes, summarize any relevant discussion, including links
    to publicly-available messages when applicable.

Yes; authors have been reminded.

13. Has each author, editor, and contributor shown their willingness to be
    listed as such? If the total number of authors and editors on the front page
    is greater than five, please provide a justification.

Yes.

14. Document any remaining I-D nits in this document. Simply running the [idnits
    tool][8] is not enough; please review the ["Content Guidelines" on
    authors.ietf.org][15]. (Also note that the current idnits tool generates
    some incorrect warnings; a rewrite is underway.)

All good.

15. Should any informative references be normative or vice-versa? See the [IESG
    Statement on Normative and Informative References][16].

All good.

16. List any normative references that are not freely available to anyone. Did
    the community have sufficient access to review any such normative
    references?

N/A

17. Are there any normative downward references (see [RFC 3967][9] and [BCP
    97
][10]) that are not already listed in the [DOWNREF registry][17]? If so,
    list them.

No.

18. Are there normative references to documents that are not ready to be
    submitted to the IESG for publication or are otherwise in an unclear state?
    If so, what is the plan for their completion?

No.

19. Will publication of this document change the status of any existing RFCs? If
    so, does the Datatracker metadata correctly reflect this and are those RFCs
    listed on the title page, in the abstract, and discussed in the
    introduction? If not, explain why and point to the part of the document
    where the relationship of this document to these other RFCs is discussed.

No.

20. Describe the document shepherd's review of the IANA considerations section,
    especially with regard to its consistency with the body of the document.
    Confirm that all aspects of the document requiring IANA assignments are
    associated with the appropriate reservations in IANA registries. Confirm
    that any referenced IANA registries have been clearly identified. Confirm
    that each newly created IANA registry specifies its initial contents,
    allocations procedures, and a reasonable name (see [RFC 8126][11]).

It's two straightforward registrations.

21. List any new IANA registries that require Designated Expert Review for
    future allocations. Are the instructions to the Designated Expert clear?
    Please include suggestions of designated experts, if appropriate.

N/A.


[1]: https://www.ietf.org/about/groups/iesg/
[2]: https://www.rfc-editor.org/rfc/rfc4858.html
[3]: https://www.rfc-editor.org/rfc/rfc7942.html
[4]: https://wiki.ietf.org/group/ops/yang-review-tools
[5]: https://www.rfc-editor.org/rfc/rfc8342.html
[6]: https://wiki.ietf.org/group/iesg/ExpertTopics
[7]: https://www.rfc-editor.org/info/bcp79
[8]: https://www.ietf.org/tools/idnits/
[9]: https://www.rfc-editor.org/rfc/rfc3967.html
[10]: https://www.rfc-editor.org/info/bcp97
[11]: https://www.rfc-editor.org/rfc/rfc8126.html
[12]: https://www.rfc-editor.org/rfc/rfc2026.html#section-5
[13]: https://www.rfc-editor.org/rfc/rfc2026.html#section-4.1
[14]: https://www.rfc-editor.org/rfc/rfc2026.html#section-4.2
[15]: https://authors.ietf.org/en/content-guidelines-overview
[16]: https://www.ietf.org/about/groups/iesg/statements/normative-informative-references/
[17]: https://datatracker.ietf.org/doc/downref/

2025-10-22
12 Morgan Condie IANA Review state changed to IANA - Review Needed
2025-10-22
12 Morgan Condie
The following Last Call announcement was sent out (ends 2025-11-12):

From: The IESG
To: IETF-Announce
CC: draft-ietf-httpbis-safe-method-w-body@ietf.org, gorry@erg.abdn.ac.uk, httpbis-chairs@ietf.org, ietf-http-wg@w3.org, mnot@mnot.net …
The following Last Call announcement was sent out (ends 2025-11-12):

From: The IESG
To: IETF-Announce
CC: draft-ietf-httpbis-safe-method-w-body@ietf.org, gorry@erg.abdn.ac.uk, httpbis-chairs@ietf.org, ietf-http-wg@w3.org, mnot@mnot.net
Reply-To: last-call@ietf.org
Sender:
Subject: Last Call:  (The HTTP QUERY Method) to Proposed Standard


The IESG has received a request from the HTTP WG (httpbis) to consider the
following document: - 'The HTTP QUERY Method'
  as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2025-11-12. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


  This specification defines the QUERY method for HTTP.  A QUERY
  requests that the request target process the enclosed content in a
  safe/idempotent manner and then respond with the result of that
  processing.  This is similar to POST requests but can be
  automatically repeated or restarted without concern for partial state
  changes.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-httpbis-safe-method-w-body/



No IPR declarations have been submitted directly on this I-D.




2025-10-22
12 Morgan Condie IESG state changed to In Last Call from Last Call Requested
2025-10-22
12 Morgan Condie Last call announcement was changed
2025-10-22
12 Gorry Fairhurst Last call was requested
2025-10-22
12 Gorry Fairhurst Last call announcement was generated
2025-10-22
12 Gorry Fairhurst IESG state changed to Last Call Requested from AD Evaluation
2025-10-22
12 Gorry Fairhurst This documnet is ready for IETF-LC.
2025-10-22
12 Gorry Fairhurst IESG state changed to AD Evaluation from AD Evaluation::AD Followup
2025-10-22
12 Gorry Fairhurst IESG state changed to AD Evaluation::AD Followup from AD Evaluation::External Party
2025-10-22
12 Gorry Fairhurst Ballot writeup was changed
2025-10-22
12 Gorry Fairhurst Not hearing any further feedback, this concludes the second WGLC.
On 22/10/2025, Mark Nottingham.
2025-10-18
12 Gorry Fairhurst Second WGLC will end on 22 October 2025.
2025-10-02
12 Gorry Fairhurst An external review was requested from HTTPDIR, expecting a revised I-D to result.
2025-10-02
12 (System) Changed action holders to Gorry Fairhurst (IESG state changed)
2025-10-02
12 Gorry Fairhurst IESG state changed to AD Evaluation::External Party from Publication Requested::Revised I-D Needed
2025-09-30
12 (System) Changed action holders to Mike Bishop, Julian Reschke, James Snell (IESG state changed)
2025-09-30
12 Gorry Fairhurst IESG state changed to Publication Requested::Revised I-D Needed from Publication Requested
2025-09-29
12 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-12.txt
2025-09-29
12 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2025-09-29
12 Julian Reschke Uploaded new revision
2025-07-15
11 Gorry Fairhurst Ballot writeup was generated
2025-07-15
11 Gorry Fairhurst Ballot approval text was generated
2025-06-20
11 Roy Fielding Request for Early review by HTTPDIR Completed: Not Ready. Reviewer: Roy Fielding. Sent review to list.
2025-06-03
11 Mark Nottingham Request for Early review by HTTPDIR is assigned to Roy Fielding
2025-06-02
11 Mike Bishop Requested Early review by HTTPDIR
2025-06-02
11 Mike Bishop Shepherding AD changed to Gorry Fairhurst
2025-05-19
11 Mark Nottingham
# Document Shepherd Write-Up for Group Documents

*This version is dated 4 July 2022.*

Thank you for your service as a document shepherd. Among the …
# Document Shepherd Write-Up for Group Documents

*This version is dated 4 July 2022.*

Thank you for your service as a document shepherd. Among the responsibilities is
answering the questions in this write-up to give helpful context to Last Call
and Internet Engineering Steering Group ([IESG][1]) reviewers, and your
diligence in completing it is appreciated. The full role of the shepherd is
further described in [RFC 4858][2]. You will need the cooperation of the authors
and editors to complete these checks.

Note that some numbered items contain multiple related questions; please be sure
to answer all of them.

## Document History

1. Does the working group (WG) consensus represent the strong concurrence of a
  few individuals, with others being silent, or did it reach broad agreement?

This draft was extensively discussed over a long period of time, and has had diverse input.

2. Was there controversy about particular points, or were there decisions where
  the consensus was particularly rough?

Not particularly.

3. Has anyone threatened an appeal or otherwise indicated extreme discontent? If
  so, please summarize the areas of conflict in separate email messages to the
  responsible Area Director. (It should be in a separate email because this
  questionnaire is publicly available.)

No.

4. For protocol documents, are there existing implementations of the contents of
  the document? Have a significant number of potential implementers indicated
  plans to implement? Are any existing implementations reported somewhere,
  either in the document itself (as [RFC 7942][3] recommends) or elsewhere
  (where)?

No. This is a new semantic protocol element, so implementation is a bit 'chicken and egg' -- people don't want to implement until it's blessed as a standard.

## Additional Reviews

5. Do the contents of this document closely interact with technologies in other
  IETF working groups or external organizations, and would it therefore benefit
  from their review? Have those reviews occurred? If yes, describe which
  reviews took place.

Not particularly. It has been exposed to W3C and WHATWG folks.

6. Describe how the document meets any required formal expert review criteria,
  such as the MIB Doctor, YANG Doctor, media type, and URI type reviews.

N/A.

7. If the document contains a YANG module, has the final version of the module
  been checked with any of the [recommended validation tools][4] for syntax and
  formatting validation? If there are any resulting errors or warnings, what is
  the justification for not fixing them at this time? Does the YANG module
  comply with the Network Management Datastore Architecture (NMDA) as specified
  in [RFC 8342][5]?

No/yAng.

8. Describe reviews and automated checks performed to validate sections of the
  final version of the document written in a formal language, such as XML code,
  BNF rules, MIB definitions, CBOR's CDDL, etc.

N/A.

## Document Shepherd Checks

9. Based on the shepherd's review of the document, is it their opinion that this
  document is needed, clearly written, complete, correctly designed, and ready
  to be handed off to the responsible Area Director?

Yes.

10. Several IETF Areas have assembled [lists of common issues that their
    reviewers encounter][6]. For which areas have such issues been identified
    and addressed? For which does this still need to happen in subsequent
    reviews?

The impact of this draft is relatively contained to the areas that the HTTP WG usually operates within; we have discussed security and operability aspects of the method as part of WG discussion.

11. What type of RFC publication is being requested on the IETF stream ([Best
    Current Practice][12], [Proposed Standard, Internet Standard][13],
    [Informational, Experimental or Historic][14])? Why is this the proper type
    of RFC? Do all Datatracker state attributes correctly reflect this intent?

PS. As a HTTP method definition, this is required.

12. Have reasonable efforts been made to remind all authors of the intellectual
    property rights (IPR) disclosure obligations described in [BCP 79][7]? To
    the best of your knowledge, have all required disclosures been filed? If
    not, explain why. If yes, summarize any relevant discussion, including links
    to publicly-available messages when applicable.

Yes; authors have been reminded.

13. Has each author, editor, and contributor shown their willingness to be
    listed as such? If the total number of authors and editors on the front page
    is greater than five, please provide a justification.

Yes.

14. Document any remaining I-D nits in this document. Simply running the [idnits
    tool][8] is not enough; please review the ["Content Guidelines" on
    authors.ietf.org][15]. (Also note that the current idnits tool generates
    some incorrect warnings; a rewrite is underway.)

All good.

15. Should any informative references be normative or vice-versa? See the [IESG
    Statement on Normative and Informative References][16].

All good.

16. List any normative references that are not freely available to anyone. Did
    the community have sufficient access to review any such normative
    references?

N/A

17. Are there any normative downward references (see [RFC 3967][9] and [BCP
    97
][10]) that are not already listed in the [DOWNREF registry][17]? If so,
    list them.

No.

18. Are there normative references to documents that are not ready to be
    submitted to the IESG for publication or are otherwise in an unclear state?
    If so, what is the plan for their completion?

No.

19. Will publication of this document change the status of any existing RFCs? If
    so, does the Datatracker metadata correctly reflect this and are those RFCs
    listed on the title page, in the abstract, and discussed in the
    introduction? If not, explain why and point to the part of the document
    where the relationship of this document to these other RFCs is discussed.

No.

20. Describe the document shepherd's review of the IANA considerations section,
    especially with regard to its consistency with the body of the document.
    Confirm that all aspects of the document requiring IANA assignments are
    associated with the appropriate reservations in IANA registries. Confirm
    that any referenced IANA registries have been clearly identified. Confirm
    that each newly created IANA registry specifies its initial contents,
    allocations procedures, and a reasonable name (see [RFC 8126][11]).

It's two straightforward registrations.

21. List any new IANA registries that require Designated Expert Review for
    future allocations. Are the instructions to the Designated Expert clear?
    Please include suggestions of designated experts, if appropriate.

N/A.


[1]: https://www.ietf.org/about/groups/iesg/
[2]: https://www.rfc-editor.org/rfc/rfc4858.html
[3]: https://www.rfc-editor.org/rfc/rfc7942.html
[4]: https://wiki.ietf.org/group/ops/yang-review-tools
[5]: https://www.rfc-editor.org/rfc/rfc8342.html
[6]: https://wiki.ietf.org/group/iesg/ExpertTopics
[7]: https://www.rfc-editor.org/info/bcp79
[8]: https://www.ietf.org/tools/idnits/
[9]: https://www.rfc-editor.org/rfc/rfc3967.html
[10]: https://www.rfc-editor.org/info/bcp97
[11]: https://www.rfc-editor.org/rfc/rfc8126.html
[12]: https://www.rfc-editor.org/rfc/rfc2026.html#section-5
[13]: https://www.rfc-editor.org/rfc/rfc2026.html#section-4.1
[14]: https://www.rfc-editor.org/rfc/rfc2026.html#section-4.2
[15]: https://authors.ietf.org/en/content-guidelines-overview
[16]: https://www.ietf.org/about/groups/iesg/statements/normative-informative-references/
[17]: https://datatracker.ietf.org/doc/downref/

2025-05-19
11 Mark Nottingham IETF WG state changed to Submitted to IESG for Publication from Waiting for WG Chair Go-Ahead
2025-05-19
11 Mark Nottingham IESG state changed to Publication Requested from I-D Exists
2025-05-19
11 (System) Changed action holders to Mike Bishop (IESG state changed)
2025-05-19
11 Mark Nottingham Responsible AD changed to Mike Bishop
2025-05-19
11 Mark Nottingham Document is now in IESG state Publication Requested
2025-05-19
11 Mark Nottingham Tag Revised I-D Needed - Issue raised by WGLC cleared.
2025-05-19
11 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-11.txt
2025-05-19
11 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2025-05-19
11 Julian Reschke Uploaded new revision
2025-05-15
10 Mark Nottingham Tag Revised I-D Needed - Issue raised by WGLC set.
2025-05-15
10 Mark Nottingham IETF WG state changed to Waiting for WG Chair Go-Ahead from WG Consensus: Waiting for Write-Up
2025-05-15
10 Mark Nottingham
# Document Shepherd Write-Up for Group Documents

*This version is dated 4 July 2022.*

Thank you for your service as a document shepherd. Among the …
# Document Shepherd Write-Up for Group Documents

*This version is dated 4 July 2022.*

Thank you for your service as a document shepherd. Among the responsibilities is
answering the questions in this write-up to give helpful context to Last Call
and Internet Engineering Steering Group ([IESG][1]) reviewers, and your
diligence in completing it is appreciated. The full role of the shepherd is
further described in [RFC 4858][2]. You will need the cooperation of the authors
and editors to complete these checks.

Note that some numbered items contain multiple related questions; please be sure
to answer all of them.

## Document History

1. Does the working group (WG) consensus represent the strong concurrence of a
  few individuals, with others being silent, or did it reach broad agreement?

This draft was extensively discussed over a long period of time, and has had diverse input.

2. Was there controversy about particular points, or were there decisions where
  the consensus was particularly rough?

Not particularly.

3. Has anyone threatened an appeal or otherwise indicated extreme discontent? If
  so, please summarize the areas of conflict in separate email messages to the
  responsible Area Director. (It should be in a separate email because this
  questionnaire is publicly available.)

No.

4. For protocol documents, are there existing implementations of the contents of
  the document? Have a significant number of potential implementers indicated
  plans to implement? Are any existing implementations reported somewhere,
  either in the document itself (as [RFC 7942][3] recommends) or elsewhere
  (where)?

No. This is a new semantic protocol element, so implementation is a bit 'chicken and egg' -- people don't want to implement until it's blessed as a standard.

## Additional Reviews

5. Do the contents of this document closely interact with technologies in other
  IETF working groups or external organizations, and would it therefore benefit
  from their review? Have those reviews occurred? If yes, describe which
  reviews took place.

Not particularly. It has been exposed to W3C and WHATWG folks.

6. Describe how the document meets any required formal expert review criteria,
  such as the MIB Doctor, YANG Doctor, media type, and URI type reviews.

N/A.

7. If the document contains a YANG module, has the final version of the module
  been checked with any of the [recommended validation tools][4] for syntax and
  formatting validation? If there are any resulting errors or warnings, what is
  the justification for not fixing them at this time? Does the YANG module
  comply with the Network Management Datastore Architecture (NMDA) as specified
  in [RFC 8342][5]?

No/yAng.

8. Describe reviews and automated checks performed to validate sections of the
  final version of the document written in a formal language, such as XML code,
  BNF rules, MIB definitions, CBOR's CDDL, etc.

N/A.

## Document Shepherd Checks

9. Based on the shepherd's review of the document, is it their opinion that this
  document is needed, clearly written, complete, correctly designed, and ready
  to be handed off to the responsible Area Director?

Yes.

10. Several IETF Areas have assembled [lists of common issues that their
    reviewers encounter][6]. For which areas have such issues been identified
    and addressed? For which does this still need to happen in subsequent
    reviews?

The impact of this draft is relatively contained to the areas that the HTTP WG usually operates within; we have discussed security and operability aspects of the method as part of WG discussion.

11. What type of RFC publication is being requested on the IETF stream ([Best
    Current Practice][12], [Proposed Standard, Internet Standard][13],
    [Informational, Experimental or Historic][14])? Why is this the proper type
    of RFC? Do all Datatracker state attributes correctly reflect this intent?

PS. As a HTTP method definition, this is required.

12. Have reasonable efforts been made to remind all authors of the intellectual
    property rights (IPR) disclosure obligations described in [BCP 79][7]? To
    the best of your knowledge, have all required disclosures been filed? If
    not, explain why. If yes, summarize any relevant discussion, including links
    to publicly-available messages when applicable.

Yes; authors have been reminded.

13. Has each author, editor, and contributor shown their willingness to be
    listed as such? If the total number of authors and editors on the front page
    is greater than five, please provide a justification.

Yes.

14. Document any remaining I-D nits in this document. Simply running the [idnits
    tool][8] is not enough; please review the ["Content Guidelines" on
    authors.ietf.org][15]. (Also note that the current idnits tool generates
    some incorrect warnings; a rewrite is underway.)

All good.

15. Should any informative references be normative or vice-versa? See the [IESG
    Statement on Normative and Informative References][16].

All good.

16. List any normative references that are not freely available to anyone. Did
    the community have sufficient access to review any such normative
    references?

N/A

17. Are there any normative downward references (see [RFC 3967][9] and [BCP
    97
][10]) that are not already listed in the [DOWNREF registry][17]? If so,
    list them.

No.

18. Are there normative references to documents that are not ready to be
    submitted to the IESG for publication or are otherwise in an unclear state?
    If so, what is the plan for their completion?

No.

19. Will publication of this document change the status of any existing RFCs? If
    so, does the Datatracker metadata correctly reflect this and are those RFCs
    listed on the title page, in the abstract, and discussed in the
    introduction? If not, explain why and point to the part of the document
    where the relationship of this document to these other RFCs is discussed.

No.

20. Describe the document shepherd's review of the IANA considerations section,
    especially with regard to its consistency with the body of the document.
    Confirm that all aspects of the document requiring IANA assignments are
    associated with the appropriate reservations in IANA registries. Confirm
    that any referenced IANA registries have been clearly identified. Confirm
    that each newly created IANA registry specifies its initial contents,
    allocations procedures, and a reasonable name (see [RFC 8126][11]).

It's two straightforward registrations.

21. List any new IANA registries that require Designated Expert Review for
    future allocations. Are the instructions to the Designated Expert clear?
    Please include suggestions of designated experts, if appropriate.

N/A.


[1]: https://www.ietf.org/about/groups/iesg/
[2]: https://www.rfc-editor.org/rfc/rfc4858.html
[3]: https://www.rfc-editor.org/rfc/rfc7942.html
[4]: https://wiki.ietf.org/group/ops/yang-review-tools
[5]: https://www.rfc-editor.org/rfc/rfc8342.html
[6]: https://wiki.ietf.org/group/iesg/ExpertTopics
[7]: https://www.rfc-editor.org/info/bcp79
[8]: https://www.ietf.org/tools/idnits/
[9]: https://www.rfc-editor.org/rfc/rfc3967.html
[10]: https://www.rfc-editor.org/info/bcp97
[11]: https://www.rfc-editor.org/rfc/rfc8126.html
[12]: https://www.rfc-editor.org/rfc/rfc2026.html#section-5
[13]: https://www.rfc-editor.org/rfc/rfc2026.html#section-4.1
[14]: https://www.rfc-editor.org/rfc/rfc2026.html#section-4.2
[15]: https://authors.ietf.org/en/content-guidelines-overview
[16]: https://www.ietf.org/about/groups/iesg/statements/normative-informative-references/
[17]: https://datatracker.ietf.org/doc/downref/

2025-05-15
10 Mark Nottingham IETF WG state changed to WG Consensus: Waiting for Write-Up from In WG Last Call
2025-05-15
10 Mark Nottingham Notification list changed to mnot@mnot.net because the document shepherd was set
2025-05-15
10 Mark Nottingham Document shepherd changed to Mark Nottingham
2025-04-30
10 Mark Nottingham IETF WG state changed to In WG Last Call from WG Document
2025-04-29
10 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-10.txt
2025-04-29
10 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2025-04-29
10 Julian Reschke Uploaded new revision
2025-04-05
09 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-09.txt
2025-04-05
09 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2025-04-05
09 Julian Reschke Uploaded new revision
2025-02-25
08 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-08.txt
2025-02-25
08 Julian Reschke New version approved
2025-02-25
08 (System) Request for posting confirmation emailed to previous authors: Ashok Malhotra , James Snell , Julian Reschke , Mike Bishop
2025-02-25
08 Julian Reschke Uploaded new revision
2025-01-07
07 Mark Nottingham Changed consensus to Yes from Unknown
2025-01-07
07 Mark Nottingham Intended Status changed to Proposed Standard from None
2024-12-18
07 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-07.txt
2024-12-18
07 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2024-12-18
07 Julian Reschke Uploaded new revision
2024-10-21
06 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-06.txt
2024-10-21
06 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2024-10-21
06 Julian Reschke Uploaded new revision
2024-09-14
05 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-05.txt
2024-09-14
05 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2024-09-14
05 Julian Reschke Uploaded new revision
2024-09-14
04 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-04.txt
2024-09-14
04 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2024-09-14
04 Julian Reschke Uploaded new revision
2023-01-05
03 (System) Document has expired
2022-07-04
03 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-03.txt
2022-07-04
03 Julian Reschke New version accepted (logged-in submitter: Julian Reschke)
2022-07-04
03 Julian Reschke Uploaded new revision
2022-05-13
02 (System) Document has expired
2021-11-11
02 Mark Nottingham This document now replaces draft-snell-search-method instead of None
2021-11-09
02 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-02.txt
2021-11-09
02 (System) New version accepted (logged-in submitter: Julian Reschke)
2021-11-09
02 Julian Reschke Uploaded new revision
2021-06-08
01 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-01.txt
2021-06-08
01 (System) New version approved
2021-06-08
01 (System) Request for posting confirmation emailed to previous authors: Ashok Malhotra , James Snell , Julian Reschke
2021-06-08
01 Julian Reschke Uploaded new revision
2021-03-31
00 Julian Reschke New version available: draft-ietf-httpbis-safe-method-w-body-00.txt
2021-03-31
00 (System) WG -00 approved
2021-03-31
00 Julian Reschke Set submitter to "Julian Reschke ", replaces to (none) and sent approval email to group chairs: httpbis-chairs@ietf.org
2021-03-31
00 Julian Reschke Uploaded new revision