W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2020

Re: GET / DELETE request bodies

From: Cory Benfield <cory@lukasa.co.uk>
Date: Mon, 17 Feb 2020 09:53:57 +0000
Message-ID: <CAH_hAJEdM+NeVKAwEC+8uQf_0Dv-ArEtetuSoOW3wcV9WMeMZw@mail.gmail.com>
To: Rob Sayre <sayrer@gmail.com>
Cc: "ietf-http-wg@w3.org Group" <ietf-http-wg@w3.org>
The semantic requirement missing is that DELETE bodies have no
spec-defined semantics. This is not that they can't have semantics, or
that they shouldn't have spec-defined semantics, only that no
specification has ever said what a body in a DELETE request means.
They never have. The result of this is that DELETES with bodies aren't
interoperable: while they may work with a specific service, that
service has defined a special-case for itself. Arbitrary
implementations are free to ignore DELETE requests with bodies, or
reject them, or do anything else they like with them.

The relevant section of the HTTP specification that discusses what it
means for a message body to have semantics is RFC 7231 ยง 3.3 (Payload
Semantics) (https://tools.ietf.org/html/rfc7231#section-3.3).

On Wed, 12 Feb 2020 at 08:30, Rob Sayre <sayrer@gmail.com> wrote:
> Hi,
> I saw
> https://github.com/httpwg/http-core/pull/300
> It's true that the semantics here aren't defined, but I've generally seen this stuff used when the request data won't fit in the request line.
> What semantic requirement is missing vs the request line? Some carriage returns?
> thanks,
> Rob
Received on Monday, 17 February 2020 09:54:24 UTC

This archive was generated by hypermail 2.4.0 : Monday, 17 February 2020 09:54:26 UTC