Skip to content
Errors
Commands
Flags
Config
Cheat sheets
Changes
Compat
Codes
Compare
Glossary
Search
Ctrl K
Browse
Error Messages
Commands
Flags & Options
Config Reference
Cheat Sheets
Version Changes
Compatibility
Codes & Tables
X vs Y
Glossary
All tools
Home
Tools
HTTP
Protocols & standards
HTTP
HTTP semantics, methods, headers and status codes.
Official documentation
Flags
1
Config
1
Codes
1
Glossary
1
Set-Cookie attributes: SameSite, Secure, HttpOnly, Max-Age
Set-Cookie attributes decide when browsers send a cookie: SameSite controls cross-site requests, None needs Secure, HttpOnly hides it from JavaScript.
All HTTP flags & options
Strict-Transport-Security (HSTS): max-age, includeSubDomains, preload
Strict-Transport-Security makes browsers use only HTTPS for max-age seconds. includeSubDomains covers subdomains; preload is a commitment that is hard to undo.
All HTTP config reference
HTTP status codes: 1xx to 5xx with meaning and common causes
HTTP status codes explained: 200 and 204, the redirects 301 to 308, client errors 400 to 429 and server errors 500 to 504, each with its most common cause.
All HTTP codes & tables
What does idempotent mean in HTTP?
An HTTP method is idempotent if repeating the same request has the same effect on the server as sending it once: GET, PUT and DELETE are, POST is not.
All HTTP glossary
Esc