Live data from Hacker News

RFC 10008: The new HTTP Query Method

rfc-editor.org

171–180 of 189 posts

Re: RFC 10008: The new HTTP Query Method

#171

Earlier quoted context omitted.

Unlike POST, however, the method is explicitly safe and idempotent, allowing functions like caching and automatic retries to operate.

Putting something in a spec does not automatically make it true. In the real world if you repeat expensive queries more than an undefined amount you get blocked or at least bot-checked.

From the browser POV it doesn't need to ask if you want to re-send data.

Re: RFC 10008: The new HTTP Query Method

#173
> https://www.rfc-editor.org/info/rfc10008/#section-2.8

Having a standard way to do pagination would be extremely useful. If we could add an items (or similar) range header type that would be excellent!

For example, in the HEAD response (and the QUERY response):

  accept-ranges: items
  items-length: 342
In the QUERY request:

  Range: items=0-9

Re: RFC 10008: The new HTTP Query Method

#174

Earlier quoted context omitted.

Unlike POST, however, the method is explicitly safe and idempotent, allowing functions like caching and automatic retries to operate.

Putting something in a spec does not automatically make it true. In the real world if you repeat expensive queries more than an undefined amount you get blocked or at least bot-checked.

Putting something in a spec does not automatically make it true.

Terrible news for computing.

Re: RFC 10008: The new HTTP Query Method

#175

Just curious, was it Google/Facebook that sponsored this?

Two of the authors are from Akamai and Cloudflare.

Interesting. The reason I asked is both companies were on a user hostile (per usual) campaign to hide query parameters from the regular consumer in an attempt to track them better.

Re: RFC 10008: The new HTTP Query Method

#176
post #130

Earlier quoted context omitted.

Not freely. It is idempotent, not safe. So it still can have serious load consequences.

Unlike POST, however, the method is explicitly safe and idempotent, allowing functions like caching and automatic retries to operate.

Yes. That is what the spec says. However, if the search query is expensive you need some form of caching. Either on the endpoint itself caching the data, or the mechanism with location to redirect to the location of the result.

Re: RFC 10008: The new HTTP Query Method

#177
post #156

I wonder if HTML forms will add support for QUERY: This would avoid the annoying re-submission warnings you're getting if you refresh a page that was returned by a POST form submission, since QUERY is required to be idempotent.

If new method support is added, PUT should be used in this scenario.

We do already have CALL

Re: RFC 10008: The new HTTP Query Method

#178
When adding new HTTP methods, they should have included protection against cross-domain requests into the method, i.e. the server should not response to QUERY requests from another domain by default and the browser should not include cookies and auth in cross-domain requests. This was a mistake not to disable cross-domain GET/POST requests and it should not be repeated.

Re: RFC 10008: The new HTTP Query Method

#179

> https://www.rfc-editor.org/info/rfc10008/#section-2.8 Having a standard way to do pagination would be extremely useful. If we could add an items (or similar) range header type that would be excellent! For example, in the HEAD response (and the QUERY response): accept-ranges: items items-length: 342 In the QUERY request: Range: items=0-9

The pagination is not always done with page numbers, sometimes there are "next" and "previous" tokens.

Re: RFC 10008: The new HTTP Query Method

#180
I’m so glad I work with RPC frameworks in the backend that don’t have to deal with these weird restrictions and bike shedding. I get that REST is well embedded in the public internet, but I don’t get why so many people use it in their private systems.
Post reply on HN