I'm very grumpy about #HTTP response status code 429 AKA "Too many requests".

It tells you absolutely nothing except that you've been sending too many requests. Sure, but how many are too many? Trial-and-error only gets you so far, and if things change down the line you're back to square one.

I wish we had a way to ask for throttling limits - or even better - if the server-side would respond slowly instead, until you're back below the limit.

Today I Learned what an HTTP 307 does that's subtly different from other redirect responses and that a NextJS `res.redirect()` uses it by default.

The 307 redirects to the new URL with the same request method (in my case POST). I was redirecting a form submit to an OAuth authorisation URL. Switching to an HTTP 303 swaps the method to GET and has sorted things out.

Took a bit to figure that one out! 😅

Reference: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/307

#TodayILearned #TIL #NextJS #HTTP

#RFC7807: "Problem Details for #HTTP #API": https://www.rfc-editor.org/rfc/rfc7807

Found an interesting article through Manuel Simoni: https://www.w3.org/People/Connolly/9703-web-apps-essay.html

"HTTP was design[ed] as a distributed realization of the Objective C (originally Smalltalk) message passing infrastructure [...]
Uniform Resource Locator is just the result of squeezing the term _object reference_ through the IETF standardization process."

#Smalltalk #ObjectiveC #HTTP #WWW #WebDevelopment #WebDev #ObjectOrientedProgramming #OOP #DistributedComputing #ProgrammingLanguages #Programming

Interesting: https://www.w3.org/People/Connolly/9703-web-apps-essay.html

#Smalltalk #ObjectiveC #HTTP #WWW #WebDevelopment #WebDev #ObjectOrientedProgramming #OOP #DistributedComputing #ProgrammingLanguages #Programming

Whether or not #htmx is a good way to build #web apps; the fact that it's #API is composed of #HTML attrs, #HTTP headers, and #JavaScript #events give big way-it-should-be vibes.

#webDev #webdevelopment

Anyone know of an #http parsing library or code for classic #macos? After decrypting a #SSL #TCP stream I’d love to shove it into a lib that can parse it all out and let me extract the relevant bits. I found HTTP sample code for OpenTransport but not sure if that’s right path. I may also not be thinking of the problem correctly but having fun experimenting and kinda don’t want to write it from scratch #RetroComputing #macintosh

I found it!!! #techjoke #http

https://insomnia.rest/products/insomnia - #Insomnia is like #Postman or #Fiddler: craft and watch #http #web requests.

Does anyone know a good explainer how exactly common browsers implement #HTTP alternative services (alt-srv #AltSrv) #firefox #chrome #chromium #safari

https://httpwg.org/specs/rfc7838.html#alt-svc

Nessuna Scelta! Microsoft rende la sicurezza in Exchange una priorità

#Microsoft ha recentemente annunciato che #Exchange Server 2016 e 2019 ora dispongono del supporto integrato per #HTTP Strict Transport Security (#HSTS), un meccanismo per #applicare il protocollo #HTTPS sicuro.

Condividi questo post se hai trovato la news interessante.

#redhotcyber #online #it #web #ai #hacking #privacy #cybersecurity #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

https://www.redhotcyber.com/post/nessuna-scelta-microsoft-rende-la-sicurezza-in-exchange-una-priorita/

🧭 Simple HTTP and REST Server
Version 1.6 #Changelog
Fix inheritance in Simple Programmatic Event Server Script
eFix error on import asset

https://assetstore.unity.com/packages/tools/utilities/simple-http-and-rest-server-244127

#unity #indiedev #server #http #rest #gamedev

Doing so led me to another “how long have I #HTTP'd again?!" discovery:

- HTTP/1.1 headers are case-insensitive - everyone just does Title-Case for…reasons?
- HTTP/2 (which I confess I still mentally file as "some stupid, probably vaguely proprietary, Google shit I don't actually care about”, even though this is probably inaccurate) explicitly mandates that headers /must be lowercase/

Cue me seeing lowercase headers out of my server & going “🤨 wtf? this looks so wrong!”

When I got started in #webDev I used a lot of <forms> and when I learned about #REST I wondered why there was no way to generate PUT, PATCH, and DELETE #http verbs from #html

Turns out a main goal of #htmx is to solve that!

https://hypermedia.systems/extending-html-as-hypermedia/#_why_only_get_post

#javaScript #hypermedia

Sliver - Adversary Emulation Framework

#dns #golang #http #gplv3 #dns_server #sliver #redteam #security_tools #pentest #infosec

https://ppn.snovvcrash.rocks/pentest/c2/sliver

So, I know nothing about network protocols, but why are HTTPS and #HTTP different URL schemes? HTTP/2 and HTTP/3 are able to carry on using https:// , was it not possible for HTTPS to be implemented to use http://whatever ?

@Floppy @vandam

So I looked into this. Allowing users to upload with #IPFS, a decentralized protocol replacement for #HTTP. Currently, I am benchmarking it by replacing my #Redis servers with it, just because I can for a few weeks.

#ActivityPub can be extended to allow for some extra allocated fields, and a fork of #Mastodon can be made.

Users will be able to upload their designs, and hosting would be decentealized and automatically spread around all users.

It is possible. I will look into a prototype, allowing users to use a bot or something like @3dprinting to share their prints before going for a fork of #Mastodon. Also need to investigate existing Activity Pub solutions and would possibly use something like #Go for the backend.

I'm still deciding on the front end.

@3dprinting #3dprinting

@maop @saulcast04 cada vez que escucho #ruby un nervio se me tensa y me da un calambre.

pero eso más bien es especificación #http no? y no es la única cabecera que viene en minúsculas.

aunque ya viste que te dio la redirección para el host de consulta pero no cambió nada en la consulta por el acct?

💻 Woah, I'm reviewing @Redocly CLI and I just noticed the amazing split command!

$ redocly split api/openapi.yaml --outDir output/

This will neatly split a sprawling messy #OpenAPI description into multiple documents using $ref, reducing duplication, making it easier to work with.

Get it: https://github.com/Redocly/redocly-cli/

#APIDevelopment #APIDesign #REST #HTTP

Does #gemini repeat the mistake of #http in that host lookups don’t support/involve #DNS SRV records? It certainly looks like it, if the custom domain setup docs found on #Sourcehut represent the standard Gemini hosting provider model :-( gemini://srht.site/custom-domains.gmi