Re: Pre-Denied: Status Code (#3410)

Mark Nottingham <mnot@mnot.net> Fri, 03 April 2026 21:48 UTC

Received: by mail2.ietf.org (Postfix) id 59794D645F56; Fri, 3 Apr 2026 14:48:01 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 55D87D645F55 for <ietfarch-httpbisa-archive-bis2Juki@mail2.ietf.org>; Fri, 3 Apr 2026 14:48:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775252881; bh=uM69vebrFT8gOBUMIJ8GZ3bZKjWeYlcosD/4wJ+rbDg=; h=Resent-Date:From:Date:References:To:In-Reply-To:Subject: Resent-From:Resent-Sender:List-Id:List-Help:List-Post: List-Unsubscribe; b=B+rZuy7zWufEjRfyMtbDc6ewDPCWUImYu+EA/lT37fp4YDQaBgq9VxLhX9webKDE4 6U5SW0+rvzJijMeDTq6i8jKeFdQZNtybFyiFbglcYO3y0KS41vdamp5GKCeNFMp9Fs 6RlSlhBwkH0QFHa4Od7353zYNkLnEeIkg9LsyELE=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -5.4
X-Spam-Level:
X-Spam-Status: No, score=-5.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="CfSQrPRt"; dkim=pass (2048-bit key) header.d=w3.org header.b="AXoXqRYk"; dkim=pass (2048-bit key) header.d=mnot.net header.b="TKf23/b0"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="M5AgtHle"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0HMSf9s4-bBR for <ietfarch-httpbisa-archive-bis2Juki@mail2.ietf.org>; Fri, 3 Apr 2026 14:48:00 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id DF2C0D645F50 for <httpbisa-archive-bis2Juki@ietf.org>; Fri, 3 Apr 2026 14:48:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Message-Id:In-Reply-To:To:References:Date:Mime-Version: Content-Type:From:Cc:Reply-To; bh=HjBaQ4KcGrNet65P+1Gm2z0gwiWQBwzvcQ70onwwL5c=; b=CfSQrPRtgkORsObQUsckJOWBWb zNt961+So1TO+qRHSrvkdUOmEiJZTe9odauKRiTC6GVGegBI8vBac+07hIEXzwokMjd2Qkkf7dcc6 hrwc3QJjlI2yKxRaTDi8nhCTDQ8Qvz0VEaueWPBaDIlv9H8yoFQi2/eHU7BA4GkjeCkZbDz72jDRN DDJypDlX9F5EIkfuBi1Hqzo3G9cJUZdVMhB6xwz2I4KPNUmpZU/Y9UcO80BXCsZEAw+OqztBTHHT+ jAd+8w37dBrGakDFnnDFdv9nQQ/DqOa50Si+ugk8TAMcdxzecuC4Ro1F2x81cLNFAQ4EWuj4qAGoC UJZm4pUw==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1w8mMO-00GOXu-2U for ietf-http-wg-dist@listhub.w3.org; Fri, 03 Apr 2026 21:47:24 +0000
Resent-Date: Fri, 03 Apr 2026 21:47:24 +0000
Resent-Message-Id: <E1w8mMO-00GOXu-2U@mab.w3.org>
Received: from ip-10-0-0-224.ec2.internal ([10.0.0.224] helo=puck.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <mnot@mnot.net>) id 1w8mMM-00GOWN-1n for ietf-http-wg@listhub.w3.internal; Fri, 03 Apr 2026 21:47:22 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Message-Id:In-Reply-To:To:References:Date:Subject:Mime-Version: Content-Type:From:Cc:Reply-To; bh=HjBaQ4KcGrNet65P+1Gm2z0gwiWQBwzvcQ70onwwL5c=; t=1775252842; x=1776116842; b=AXoXqRYkaSe22vbmCEvkCt+Rg6LemTJSt+SPpEBbrP/B04F9DvwraCvHoM+ORUyHC+QpL2/52tc 2N2cAbScQ9p1F5dTIGUjonhlhcoHcQaMAXn6Y/AXxXqTFyEX778tubCs1AT5NNrNnuQNOpwyNApJE IwCRkuUrE1ZSO7Z3ryYEw8scZew1QmBLzJrbEAD0j76C/JWg6To6PgkscaYxR/rY6A27DK5j17aWx u5kzj3oGI6eyjDogVBTQU22KYxKXAoKfVhINbvedQIwLhZQFWbQqTf4M7FV6QlGJd1BKR/RrtEQJC Nu7RCjb5V643uL5vkG0DxovOMoFosH3VPp2w==;
Received-SPF: pass (puck.w3.org: domain of mnot.net designates 103.168.172.151 as permitted sender) client-ip=103.168.172.151; envelope-from=mnot@mnot.net; helo=fout-a8-smtp.messagingengine.com;
Received: from fout-a8-smtp.messagingengine.com ([103.168.172.151]) by puck.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <mnot@mnot.net>) id 1w8mML-005B2F-2c for ietf-http-wg@w3.org; Fri, 03 Apr 2026 21:47:22 +0000
Received: from phl-compute-02.internal (phl-compute-02.internal [10.202.2.42]) by mailfout.phl.internal (Postfix) with ESMTP id 8BA72EC022E for <ietf-http-wg@w3.org>; Fri, 3 Apr 2026 17:47:18 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-02.internal (MEProxy); Fri, 03 Apr 2026 17:47:18 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm3; t=1775252838; x=1775339238; bh=HjBaQ4KcGrNet65P+1Gm2z0gwiWQBwzvcQ70onwwL5c=; b= TKf23/b0meY0pdqed3Tk26z6KCOZoCUaWwB1VHG7iq0z8MjNcc+Cj0dcofoe5NxE +IWvADZOq+IHBeVcsLi76/3eCQb6N+KdamD4g+E4EAg5AQMOxdbOjrzHnpXuncjI Jmyc5bWnWLBgWt6Ll3uRe2PMS4J01CgLHvPUM3H/wnz81wRvFR5qm3BUOaepVfkb cMvJJ6P0SdiZxeAPjvBbDuPLjPIhrgRd3tWUQhHeoT0R6bGZFLzjkbXlXB3VEHtv FjtpIY7aZJowTwtA9lZUFh0Yi1fcIdXmkNlGpz5gpp9P0zssFoS4ddPUymMcCImr EkI5siGCAc+ppB85CLB8yw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1775252838; x=1775339238; bh=H jBaQ4KcGrNet65P+1Gm2z0gwiWQBwzvcQ70onwwL5c=; b=M5AgtHleN5Bji8/zF 4IDQceswh0noWTOG6bpqKiyW4wFctoSJJCD4zHpPgeJL7ykFucd6wABou8edHHuG 9SS97JpMG6dkx9Cx1K2mKjKKoaUyvQWHJHCMAivqtXeVx9/du4nGfjmNm/XPU8u+ Har5k2KVN4/YoUVlQ6GI/P6n1jJoz5bfGAF0C3mgnILVRYrXVXkptCYEcQVj7L+U boRJs7rmuQ3qb8WPAHaHNt4yTbHIxVHKa22dcNmYi3ckQ5cm38zLIB4II1UNDZ6p r443XS6Xu7/dYyJOvYLxFhWAEcQOvjGCGoquxyr3p0DqeZj2c9u55wBKgtrgmnSB IxPXQ==
X-ME-Sender: <xms:ZjXQaSNjdMGY1YXgbS5B7BcrAogOkVl1ABARWxokv8-3BDAFi_2zAA> <xme:ZjXQaW05gSA0cFJh2E-ss0Tp8r9Fk_sOqTOxzh3ucXP9oJ_JUHK7j0x5A5OiY11sx iSGROd4aw_Qf0aK1nE1wK1yFlwNEX35T2zZ_eeL0gWevkzWTC9qa8Q>
X-ME-Received: <xmr:ZjXQaUUuym8wxaTiIsPLnOCF4C3W9fxFfX_VadQZNXfHKBtCLj3F4OSGJ7Ox3Xu6kfvYa3doLHK9Z4KKo6QZ6gCg1PT5SxXSRfOkCla1c_gKfFJA2ksbpQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgddutddtiecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecunecujfgurhephfgtgfgguffffhfvjgfkofesthhqmhdthh dtjeenucfhrhhomhepofgrrhhkucfpohhtthhinhhghhgrmhcuoehmnhhothesmhhnohht rdhnvghtqeenucggtffrrghtthgvrhhnpeeufeduvddvudejffehffeggeefueefieehtd eivefggedvveegveehgeeggeeijeenucffohhmrghinhepghhithhhuhgsrdgtohhmpdhm nhhothdrnhgvthenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfh hrohhmpehmnhhothesmhhnohhtrdhnvghtpdhnsggprhgtphhtthhopedupdhmohguvgep shhmthhpohhuthdprhgtphhtthhopehivghtfhdqhhhtthhpqdifghesfiefrdhorhhg
X-ME-Proxy: <xmx:ZjXQafjF42J8kTIx-r_bi12Wf3sCwZtcY68C7gWspSHTHt_5O0Lxyg> <xmx:ZjXQaeCFmsvYdOZ-3ukXmeA8KX2YWh6ImvH85bNnGv5TtUPIQLqOJg> <xmx:ZjXQaYfBB5hlh6cOsBYspyYt5KPpmtdh9N7iLPJVqDmxXrfGVi72_w> <xmx:ZjXQaeelxc4khN55N4ZPmkYFe0DnxzVGPnM2K2McYEvbD7miZdzfCw> <xmx:ZjXQaWYnv6_iHzkPCXcYUO3zOywXLCKE0GLdsqrm0h6NnY6IvfyUb0wh>
Feedback-ID: ie6694242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA for <ietf-http-wg@w3.org>; Fri, 3 Apr 2026 17:47:17 -0400 (EDT)
From: Mark Nottingham <mnot@mnot.net>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.500.181\))
Date: Sat, 04 Apr 2026 08:47:14 +1100
References: <AFEF0264-F3E1-4DB4-8224-AF6E0185CD95@mnot.net>
To: HTTP Working Group <ietf-http-wg@w3.org>
In-Reply-To: <AFEF0264-F3E1-4DB4-8224-AF6E0185CD95@mnot.net>
Message-Id: <B71C7A37-EA52-4187-88CB-93B33FD49C59@mnot.net>
X-Mailer: Apple Mail (2.3864.500.181)
X-W3C-Hub-DKIM-Status: validation passed: (address=mnot@mnot.net domain=mnot.net), signature is good
X-W3C-Hub-DKIM-Status: validation passed: (address=mnot@mnot.net domain=messagingengine.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-9.8
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: puck.w3.org 1w8mML-005B2F-2c 331c508601e87b81df1aa72b13bfb870
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Pre-Denied: Status Code (#3410)
Archived-At: <https://www.w3.org/mid/B71C7A37-EA52-4187-88CB-93B33FD49C59@mnot.net>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/53820
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

I'll be more specific.

Does anyone see a reason not to use 419?

I'd argue that if we allow a single framework to squat on a code successfully, we're going to be running out of codes very very soon.

Cheers,


> On 4 Apr 2026, at 8:14 am, Mark Nottingham <mnot@mnot.net> wrote:
> 
> <https://github.com/httpwg/http-extensions/issues/3410>
> 
> A specific status code needs to be selected.
> 
> The initial draft suggests one in the 4xx range. That seems to be appropriate given the semantics desired (whether broad or narrow; see #3409).
> 
> If that holds, we should select a code that is unregistered and relatively unused.
> 
> The next unassigned 4xx status code is 419. No use is documented in MDN or wikipedia, but I see a few resources that mention a single PHP framework is squatting on it to indicate that a session token is expired.
> 
> What do people think? 
> 
> Cheers,
> 
> --
> Mark Nottingham   https://www.mnot.net/
> 
> 

--
Mark Nottingham   https://www.mnot.net/