The new HTTP QUERY method, now RFC 10008, lets you run complex searches with a body while staying safe and idempotent: what it is and how it works.
The HTTP Deprecation header becomes an IETF standard: a machine-readable way to signal that an endpoint is being retired. What it is, how it works, and why it matters.
RFC 9729 defines an HTTP authentication scheme that won't even reveal whether a protected resource exists: what it is, the problem it solves, and what it's for.
The IETF has published RFC 9700, the updated Best Current Practice for OAuth 2.0 security: what it is, what changes and why it matters for logins and APIs.