The new HTTP QUERY method, now RFC 10008, lets you run complex searches with a body while staying safe and idempotent: what it is and how it works.
Cloudflare proposes a third option beyond blocking or allowing AI crawlers: charging them for access to your content using the HTTP 402 status code. How it works and why it matters.
Cloudflare proposes Web Bot Auth: legitimate bots and AI agents sign their HTTP requests with a cryptographic signature (RFC 9421), instead of being recognised by spoofable IPs or User-Agents.
The HTTP Deprecation header becomes an IETF standard: a machine-readable way to signal that an endpoint is being retired. What it is, how it works, and why it matters.
RFC 9729 defines an HTTP authentication scheme that won't even reveal whether a protected resource exists: what it is, the problem it solves, and what it's for.