Pre-Denied: Status Code (#3410)

Mark Nottingham <mnot@mnot.net> Fri, 03 April 2026 21:15 UTC

Received: by mail2.ietf.org (Postfix) id 2C6F8D644E29; Fri, 3 Apr 2026 14:15:31 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 29595D644E28 for <ietfarch-httpbisa-archive-bis2Juki@mail2.ietf.org>; Fri, 3 Apr 2026 14:15:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775250931; bh=CXiUiHZwxFgn1qP6ig+7/8naO3dZZ7dss7DdQud0OSw=; h=Resent-Date:From:Date:To:Subject:Resent-From:Resent-Sender: List-Id:List-Help:List-Post:List-Unsubscribe; b=AFubPwbRY6F99PiFYcdPsD4k8IbKQEnzZ7cCPuaLvnB8UQ52mT37gd32sezvt7tUR o8I1XRJF543AdoXnTDJJzDmVpTU1/AO6Uqm4zuwtxMTh71bFGL/EHWBwDS00nMnOob bukdTi5ZsEzl4xO1tjg/QvD3W4w9Gv9hJqznYXms=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -5.4
X-Spam-Level:
X-Spam-Status: No, score=-5.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="MSGkrqdN"; dkim=pass (2048-bit key) header.d=w3.org header.b="W3Y6+3XT"; dkim=pass (2048-bit key) header.d=mnot.net header.b="Zn6L/yPI"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="iUdXFcA4"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G5oeRvsivFqg for <ietfarch-httpbisa-archive-bis2Juki@mail2.ietf.org>; Fri, 3 Apr 2026 14:15:30 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 3498DD644E0D for <httpbisa-archive-bis2Juki@ietf.org>; Fri, 3 Apr 2026 14:15:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:To:Date:Message-Id:Mime-Version:Content-Type:From:Cc:Reply-To :In-Reply-To:References; bh=6jEaEhNXyfeGNS9QvH8KxuEl5RU9rh7rE5HTEjxJx68=; b=M SGkrqdN5dhxhIcZ2c2kryyBsfX0d4UJxHic5ARUjyxph6UbJbFKFZQmciQyE4+uKTn3kZvyU7xJdl b5nhJF1LhGqVBMRLR3l/BUdJxMZtOOlH6cszd8Uncmb0Jvbwwi7QCyMULPegHpx1USmQ5Pnc4ZpAD rOF1zHIZNClg/rN6LVEDAXY5JV0JgT/BB6F5uaGofTk7dEIY0g2t9p+95+mndt7nIme+x8xyMcjhq AQigz1uuliTr1MdXFXguigFlHSiny3ULgIs+EMUJSNWtbFqL8ngkmkSLrC5kpL1c+073v0xHcsCet qOamsIpopqthelC5L3yTvbBjYwvDav0jg==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1w8lqh-00GIUm-2b for ietf-http-wg-dist@listhub.w3.org; Fri, 03 Apr 2026 21:14:39 +0000
Resent-Date: Fri, 03 Apr 2026 21:14:39 +0000
Resent-Message-Id: <E1w8lqh-00GIUm-2b@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <mnot@mnot.net>) id 1w8lqZ-00GITG-07 for ietf-http-wg@listhub.w3.internal; Fri, 03 Apr 2026 21:14:31 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=To:Date:Message-Id:Subject:Mime-Version:Content-Type:From:Cc:Reply-To :In-Reply-To:References; bh=6jEaEhNXyfeGNS9QvH8KxuEl5RU9rh7rE5HTEjxJx68=; t=1775250871; x=1776114871; b=W3Y6+3XTry0+sw9B0d3qIEdmbFQxE3Gs+SDLYQkLQHoqnm5 8VVCbfclor6ueWNtrU28SzwlSxA2SEZZOuHX5LsK5b8CDPaA5ko6WubXfwaAMJMnc/AWDrR+0NRZ2 kj6wHh0+qugaLbjM8L/n2tcPVJ9t1jVgYXP1bdSVdnFDWGxeIRT1Swhtc+xrLp28Z5SlvKNeOekXa 5HSqRllhPdIf3plQ1IvfCJcuHE1uZ/xe9YZdZw3DICSBPecL96M7jXvCzQalBlHpeNnU2bQ6QMi1T 5BFCNVwhtMF+sStJAGVIc9FEBzKTp5YlW0sP+ZYozGaJFcT/1xNUSBIb1kHXhseA==;
Received-SPF: pass (pan.w3.org: domain of mnot.net designates 103.168.172.157 as permitted sender) client-ip=103.168.172.157; envelope-from=mnot@mnot.net; helo=fhigh-a6-smtp.messagingengine.com;
Received: from fhigh-a6-smtp.messagingengine.com ([103.168.172.157]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <mnot@mnot.net>) id 1w8lqY-005pxd-0h for ietf-http-wg@w3.org; Fri, 03 Apr 2026 21:14:30 +0000
Received: from phl-compute-05.internal (phl-compute-05.internal [10.202.2.45]) by mailfhigh.phl.internal (Postfix) with ESMTP id 0152614002E4 for <ietf-http-wg@w3.org>; Fri, 3 Apr 2026 17:14:27 -0400 (EDT)
Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-05.internal (MEProxy); Fri, 03 Apr 2026 17:14:27 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h=cc :content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:message-id:mime-version:reply-to:subject :subject:to:to; s=fm3; t=1775250866; x=1775337266; bh=6jEaEhNXyf eGNS9QvH8KxuEl5RU9rh7rE5HTEjxJx68=; b=Zn6L/yPIyuaFCZ+5cLvib2m7P3 wHEzzxggI24uNi4e0WzI9j8bQ1FYHh/Fj5HtjNRV+xgxhF4ReIwT455pe6Lv4bPk TKgELNtgqAoEjOdyw1ozAGYhIkbaUhLzdGKf33Rv5eTTztcfvmZTfEbVMOXnUBCK TkWOk3iPlJ3yX9bxwSVKpvQPiUMa83gyiuJHO7KW24+DhP9Xr8oM86FLNS9BmHww 7s1BEt2TnIoNDH6JjjQoiC9pG3CSWnCZXm9DST0wyYAdHWPYr3bWP+B941r+/91j /qPtbz3ba/J4NTD7ERbrHnjrfQe9cLGUs4F/3JdJ7ZOMxOZza+GtYOUvH+lQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1775250866; x=1775337266; bh=6jEaEhNXyfeGNS9QvH8KxuEl5RU9rh7rE5H TEjxJx68=; b=iUdXFcA4cyhbpQsVopG+d35j+xnGLFCJ1Rsw5OhS/x260huEIPK UJ2NU7FP+ZaLKzSSpyvHMUFpg/szWqUUFWzRkE14cSeOsJYEnVP4S1jZbTHpVfPO wRKO9qXJmalm8y5oA07PlJFDfxOU5zfoM/9OPUOlAVlxrX8R0bu49jz4IZXQJPCn knZjtbkYuJNE8PZCfgTPO8qNsUVEOEAEymGjLkwPLYebTK79MiSncSvP6DDoLqkT XAwYezyEQ76DJfClm6sJ/rgXtd3JtbdLuyCxq9vJgLyKZYQ/raXZF9MeQhTnhO3n k6cX0jLg7qF8JuzydRJMbu7xW0UtRgzY/Nw==
X-ME-Sender: <xms:si3QaSoyvJ4k0ImJp2mRyGm1nRhgDgU0V4cXTHML0PYlhQSmR6cJAw> <xme:si3QaWipiMjrETGh2sjFxAuOf0J9boiLqgvXyv7rzxRo_goS7TaLqur4GwY_Q58Cj 6gmlETECvZZqcGrGepB5MmiViHkO7KT-sx_2_bVy0pIipIgidqfEg>
X-ME-Received: <xmr:si3QaSRe9I5DwynOdt2IEnl28Ndggl9FnHgQUe3RW3YW7KYl9eZBHUSU0F5rNgkfz_XK-gyzDjGBiOMdQsYU1y8m7XP4UaSJVumyMr46LP8vcTrE2yrqiA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgdelleelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceurghi lhhouhhtmecufedttdenucenucfjughrpefhtgfgggfukfffvffosehtqhhmtdhhtddvne cuhfhrohhmpeforghrkhcupfhothhtihhnghhhrghmuceomhhnohhtsehmnhhothdrnhgv theqnecuggftrfgrthhtvghrnhepjeehgeefvdefieefgeffkeeihfekuddvgeduveeugf ejheffjeevvdffkedvkeevnecuffhomhgrihhnpehgihhthhhusgdrtghomhdpmhhnohht rdhnvghtnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomh epmhhnohhtsehmnhhothdrnhgvthdpnhgspghrtghpthhtohepuddpmhhouggvpehsmhht phhouhhtpdhrtghpthhtohepihgvthhfqdhhthhtphdqfihgseiffedrohhrgh
X-ME-Proxy: <xmx:si3QaeuBcBKb-xRHS4BECXI3rvTOAHyCWLwV6FBkWrQyrCnQflN8iw> <xmx:si3QaVfeZvmhfqUQgCmMNr2j3ryR0m6I7UFkPpHIMeQ6n-pMJkgJ5w> <xmx:si3QaTJWOG8Rn5-QlpJevptl1jkbMXFhR0gX-cSyrpfNfO4N1Jl04A> <xmx:si3QabaUqmun4RixoNF7xPZdZFi1bqcoqPyzhiXtu4JG05mRug30Qw> <xmx:si3QaQ042adZu3_Uf9e0K9ErNBsMx4cS6MOjdaGWsbYFgba1J99rXdKK>
Feedback-ID: ie6694242:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA for <ietf-http-wg@w3.org>; Fri, 3 Apr 2026 17:14:26 -0400 (EDT)
From: Mark Nottingham <mnot@mnot.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.500.181\))
Message-Id: <AFEF0264-F3E1-4DB4-8224-AF6E0185CD95@mnot.net>
Date: Sat, 04 Apr 2026 08:14:23 +1100
To: HTTP Working Group <ietf-http-wg@w3.org>
X-Mailer: Apple Mail (2.3864.500.181)
X-W3C-Hub-DKIM-Status: validation passed: (address=mnot@mnot.net domain=mnot.net), signature is good
X-W3C-Hub-DKIM-Status: validation passed: (address=mnot@mnot.net domain=messagingengine.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-9.8
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1w8lqY-005pxd-0h 51aeefa7b0202b6209162d37de9d0f44
X-Original-To: ietf-http-wg@w3.org
Subject: Pre-Denied: Status Code (#3410)
Archived-At: <https://www.w3.org/mid/AFEF0264-F3E1-4DB4-8224-AF6E0185CD95@mnot.net>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/53816
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

<https://github.com/httpwg/http-extensions/issues/3410>

A specific status code needs to be selected.

The initial draft suggests one in the 4xx range. That seems to be appropriate given the semantics desired (whether broad or narrow; see #3409).

If that holds, we should select a code that is unregistered and relatively unused.

The next unassigned 4xx status code is 419. No use is documented in MDN or wikipedia, but I see a few resources that mention a single PHP framework is squatting on it to indicate that a session token is expired.

What do people think? 

Cheers,

--
Mark Nottingham   https://www.mnot.net/