HTTP header fields (IANA registry)

Source: https://aidb.si/d/http-header-fields — Source: Internet Assigned Numbers Authority (IANA), HTTP Field Name Registry.

Field nameStatusStructured typeDefining RFCReferencesComments
*permanent9110RFC 9110, Section 12.5.5(reserved)
A-IMpermanent3229RFC 3229
ALPNpermanent7639RFC 7639, Section 2
AMP-Cache-Transformprovisional
Acceptpermanent9110RFC 9110, Section 12.5.1
Accept-Additionspermanent2324RFC 2324
Accept-CHpermanentList8942RFC 8942, Section 3.1
Accept-Charsetdeprecated9110RFC 9110, Section 12.5.2
Accept-Datetimepermanent7089RFC 7089
Accept-Encodingpermanent9110RFC 9110, Section 12.5.3
Accept-Featurespermanent2295RFC 2295
Accept-Languagepermanent9110RFC 9110, Section 12.5.4
Accept-Patchpermanent5789RFC 5789
Accept-Postpermanent
Accept-QuerypermanentList10008RFC 10008, Section 3
Accept-Rangespermanent9110RFC 9110, Section 14.3
Accept-Signaturepermanent9421RFC 9421, Section 5.1
Access-Controlobsoleted
Access-Control-Allow-Credentialspermanent
Access-Control-Allow-Headerspermanent
Access-Control-Allow-Methodspermanent
Access-Control-Allow-Originpermanent
Access-Control-Expose-Headerspermanent
Access-Control-Max-Agepermanent
Access-Control-Request-Headerspermanent
Access-Control-Request-Methodpermanent
Activate-Storage-AccessprovisionalItemhttps://privacycg.github.io/storage-access-headers
Agepermanent9111RFC 9111, Section 5.1
Allowpermanent9110RFC 9110, Section 10.2.1
Alt-Svcpermanent7838RFC 7838
Alt-Usedpermanent7838RFC 7838
Alternatespermanent2295RFC 2295
Apply-To-Redirect-Refpermanent4437RFC 4437
Authentication-Controlpermanent8053RFC 8053, Section 4
Authentication-Infopermanent9110RFC 9110, Section 11.6.3
Authorizationpermanent9110RFC 9110, Section 11.6.2
Available-DictionarypermanentItem9842RFC 9842, Section 2.2
C-Extobsoleted2774RFC 2774[Status change of HTTP experiments to Historic]
C-Manobsoleted2774RFC 2774[Status change of HTTP experiments to Historic]
C-Optobsoleted2774RFC 2774[Status change of HTTP experiments to Historic]
C-PEPobsoleted[Status change of HTTP experiments to Historic]
C-PEP-Infodeprecated[Status change of HTTP experiments to Historic]
CDN-Cache-ControlpermanentDictionary9213RFC 9213Cache directives targeted at content delivery networks
CDN-Looppermanent8586RFC 8586
CMCD-ObjectprovisionalCTA
CMCD-RequestprovisionalCTA
CMCD-SessionprovisionalCTA
CMCD-StatusprovisionalCTA
CMSD-DynamicprovisionalCTA
CMSD-StaticprovisionalCTA
CTA-Common-Access-TokenprovisionalCTA
Cache-Controlpermanent9111RFC 9111, Section 5.2
Cache-Group-InvalidationpermanentList9875RFC 9875
Cache-GroupspermanentList9875RFC 9875
Cache-StatuspermanentList9211RFC 9211
Cal-Managed-IDpermanent8607RFC 8607, Section 5.1
CalDAV-Timezonespermanent7809RFC 7809, Section 7.1
Capsule-ProtocolpermanentItem9297RFC 9297
Cert-Not-Afterpermanent8739RFC 8739, Section 3.3
Cert-Not-Beforepermanent8739RFC 8739, Section 3.3
Clear-Site-Datapermanent
Client-CertpermanentItem9440RFC 9440, Section 2
Client-Cert-ChainpermanentList9440RFC 9440, Section 2
Closepermanent9112RFC 9112, Section 9.6(reserved)
Concealed-Auth-ExportpermanentItem9729RFC 9729
Configuration-Contextprovisional
Connect-UDP-BindpermanentItem
Connectionpermanent9110RFC 9110, Section 7.6.1
Content-Baseobsoleted2068RFC 2068Obsoleted by [RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1]
Content-DigestpermanentDictionary9530RFC 9530, Section 2
Content-Dispositionpermanent6266RFC 6266
Content-Encodingpermanent9110RFC 9110, Section 8.4
Content-IDdeprecated
Content-Languagepermanent9110RFC 9110, Section 8.5
Content-Lengthpermanent9110RFC 9110, Section 8.6
Content-Locationpermanent9110RFC 9110, Section 8.7
Content-MD5obsoleted2616RFC 2616, Section 14.15Obsoleted by [RFC 7231, Appendix B: Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content]
Content-Rangepermanent9110RFC 9110, Section 14.4
Content-Script-TypeobsoletedHTML 4.01 Specification
Content-Security-Policypermanent
Content-Security-Policy-Report-Onlypermanent
Content-Style-TypeobsoletedHTML 4.01 Specification
Content-Typepermanent9110RFC 9110, Section 8.3
Content-Versionobsoleted2068RFC 2068
Cookiepermanent6265
Cookie2obsoleted2965RFC 2965Obsoleted by [RFC 6265: HTTP State Management Mechanism]
Cross-Origin-Embedder-PolicypermanentItemHTML
Cross-Origin-Embedder-Policy-Report-OnlypermanentItemHTML
Cross-Origin-Opener-PolicypermanentItemHTML
Cross-Origin-Opener-Policy-Report-OnlypermanentItemHTML
Cross-Origin-Resource-Policypermanent
DASLpermanent5323RFC 5323
DAVpermanent4918RFC 4918
DPoPpermanent9449RFC 9449
DPoP-Noncepermanent9449RFC 9449
Datepermanent9110RFC 9110, Section 6.6.1
Default-StyleobsoletedHTML 4.01 Specification
Delta-Basepermanent3229RFC 3229
DeprecationpermanentItem9745RFC 9745, Section 2
Depthpermanent4918RFC 4918
Derived-Fromobsoleted2068RFC 2068
Destinationpermanent4918RFC 4918
Detached-JWSpermanent9635RFC 9635
Dictionary-IDpermanentItem9842RFC 9842, Section 2.3
Differential-IDdeprecated
Digestobsoleted3230RFC 3230Obsoleted by [RFC 9530, Section 1.3: Digest Fields]
EDIINT-Featuresprovisional6017RFC 6017
ETagpermanent9110RFC 9110, Section 8.8.3
Early-Datapermanent8470RFC 8470
Expectpermanent9110RFC 9110, Section 10.1.1
Expect-CTdeprecated9163RFC 9163Obsoleted by [IESG]; [HTTPBIS]
Expirespermanent9111RFC 9111, Section 5.3
Extobsoleted2774RFC 2774[Status change of HTTP experiments to Historic]
Forwardedpermanent7239RFC 7239
Frompermanent9110RFC 9110, Section 10.1.2
GetProfileobsoleted
HTTP2-Settingsobsoleted7540RFC 7540, Section 3.2.1Obsolete; see [Section 11.1 of RFC 9113]
Hobaregpermanent7486RFC 7486, Section 6.1.1
Hostpermanent9110RFC 9110, Section 7.2
IMpermanent3229RFC 3229
Ifpermanent4918RFC 4918
If-Matchpermanent9110RFC 9110, Section 13.1.1
If-Modified-Sincepermanent9110RFC 9110, Section 13.1.3
If-None-Matchpermanent9110RFC 9110, Section 13.1.2
If-Rangepermanent9110RFC 9110, Section 13.1.5
If-Schedule-Tag-Matchpermanent6338RFC 6338
If-Unmodified-Sincepermanent9110RFC 9110, Section 13.1.4
Include-Referred-Token-Binding-IDpermanent8473RFC 8473
IncrementalpermanentItem10036RFC 10036
IsolationprovisionalOASIS
Keep-Alivepermanent2068RFC 2068
Labelpermanent3253RFC 3253
Last-Event-IDpermanentHTML
Last-Modifiedpermanent9110RFC 9110, Section 8.8.2
Linkpermanent8288RFC 8288
Link-Templatepermanent9652RFC 9652
Locationpermanent9110RFC 9110, Section 10.2.2
Lock-Tokenpermanent4918RFC 4918
MIME-Versionpermanent9112RFC 9112, Appendix B.1
Manobsoleted2774RFC 2774[Status change of HTTP experiments to Historic]
Max-Forwardspermanent9110RFC 9110, Section 7.6.2
Memento-Datetimepermanent7089RFC 7089
Meterpermanent2227RFC 2227
Method-Checkobsoleted
Method-Check-Expiresobsoleted
NELpermanent
Negotiatepermanent2295RFC 2295
No-Vary-SearchpermanentDictionary
OData-EntityIdpermanentOASIS
OData-IsolationpermanentOASIS
OData-MaxVersionpermanentOASIS
OData-VersionpermanentOASIS
OSCOREpermanent8613RFC 8613, Section 11.1
OSLC-Core-VersionpermanentOASIS Project Specification 01; OASIS
Optobsoleted2774RFC 2774[Status change of HTTP experiments to Historic]
Optional-WWW-Authenticatepermanent8053RFC 8053, Section 3
Ordering-Typepermanent3648RFC 3648
Originpermanent6454RFC 6454
Origin-Agent-ClusterpermanentItemHTML
Overwritepermanent4918RFC 4918
P3Pobsoleted
PEPobsoleted
PEP-Infoobsoleted
PICS-Labelobsoleted
Permissions-Policyprovisional
Ping-FrompermanentHTML
Ping-TopermanentHTML
Positionpermanent3648RFC 3648
Pragmadeprecated9111RFC 9111, Section 5.4
Preferpermanent7240RFC 7240
Preference-Appliedpermanent7240RFC 7240
PrioritypermanentDictionary9218RFC 9218
ProfileObjectobsoleted
Protocolobsoleted
Protocol-Infodeprecated
Protocol-Querydeprecated
Protocol-Requestobsoleted
Proxy-Authenticatepermanent9110RFC 9110, Section 11.7.1
Proxy-Authentication-Infopermanent9110RFC 9110, Section 11.7.3
Proxy-Authorizationpermanent9110RFC 9110, Section 11.7.2
Proxy-Featuresobsoleted
Proxy-Instructionobsoleted
Proxy-Public-AddresspermanentList
Proxy-StatuspermanentList9209RFC 9209
Publicobsoleted2068RFC 2068
Public-Key-Pinspermanent7469RFC 7469
Public-Key-Pins-Report-Onlypermanent7469RFC 7469
Rangepermanent9110RFC 9110, Section 14.2
Redirect-Refpermanent4437RFC 4437
Refererpermanent9110RFC 9110, Section 10.1.3
Referer-Rootobsoleted
Referrer-PolicypermanentThe header name does not share the HTTP Referer header's misspelling.
RefreshpermanentHTML
Repeatability-Client-IDprovisionalOASIS
Repeatability-First-SentprovisionalOASIS
Repeatability-Request-IDprovisionalOASIS
Repeatability-ResultprovisionalOASIS
Replay-Noncepermanent8555RFC 8555, Section 6.5.1
Reporting-Endpointsprovisional
Repr-DigestpermanentDictionary9530RFC 9530, Section 3
Retry-Afterpermanent9110RFC 9110, Section 10.2.3
SLUGpermanent5023RFC 5023
Safeobsoleted2310RFC 2310[Status change of HTTP experiments to Historic]
Schedule-Replypermanent6638RFC 6638
Schedule-Tagpermanent6338RFC 6338
Sec-Fetch-DestpermanentItemhttps://www.w3.org/TR/fetch-metadata/#sec-fetch-dest-header
Sec-Fetch-ModepermanentItemhttps://www.w3.org/TR/fetch-metadata/#sec-fetch-mode-header
Sec-Fetch-SitepermanentItemhttps://www.w3.org/TR/fetch-metadata/#sec-fetch-site-header
Sec-Fetch-Storage-AccessprovisionalTokenhttps://privacycg.github.io/storage-access-headers
Sec-Fetch-UserpermanentItemhttps://www.w3.org/TR/fetch-metadata/#sec-fetch-user-header
Sec-GPCprovisional
Sec-PurposepermanentIntended to replace the (not registered) Purpose and x-moz headers.
Sec-Token-Bindingpermanent8473RFC 8473
Sec-WebSocket-Acceptpermanent6455RFC 6455
Sec-WebSocket-Extensionspermanent6455RFC 6455
Sec-WebSocket-Keypermanent6455RFC 6455
Sec-WebSocket-Protocolpermanent6455RFC 6455
Sec-WebSocket-Versionpermanent6455RFC 6455
Security-Schemeobsoleted2660RFC 2660[Status change of HTTP experiments to Historic]
Serverpermanent9110RFC 9110, Section 10.2.4
Server-Timingpermanent
Set-Cookiepermanent6265
Set-Cookie2obsoleted2965RFC 2965Obsoleted by [RFC 6265: HTTP State Management Mechanism]
Set-Txnpermanent9967RFC 9967, Section 3
SetProfileobsoleted
SignaturepermanentDictionary9421RFC 9421, Section 4.2
Signature-InputpermanentDictionary9421RFC 9421, Section 4.1
SoapActionpermanent
Status-URIpermanent2518RFC 2518
Strict-Transport-Securitypermanent6797RFC 6797
Sunsetpermanent8594RFC 8594
Surrogate-Capabilityprovisional
Surrogate-Controlprovisional
TCNpermanent2295RFC 2295
TEpermanent9110RFC 9110, Section 10.1.4
TTLpermanent8030RFC 8030, Section 5.2
Timeoutpermanent4918RFC 4918
Timing-Allow-Originprovisional
Topicpermanent8030RFC 8030, Section 5.4
Traceparentpermanent
Tracestatepermanent
Trailerpermanent9110RFC 9110, Section 6.6.2
Transfer-Encodingpermanent9112RFC 9112, Section 6.1
URIobsoleted2068RFC 2068
Unencoded-DigestpermanentDictionary
Upgradepermanent9110RFC 9110, Section 7.8
Urgencypermanent8030RFC 8030, Section 5.3
Use-As-DictionarypermanentDictionary9842RFC 9842, Section 2.1
User-Agentpermanent9110RFC 9110, Section 10.1.5
Variant-Varypermanent2295RFC 2295
Varypermanent9110RFC 9110, Section 12.5.5
Viapermanent9110RFC 9110, Section 7.6.3
WWW-Authenticatepermanent9110RFC 9110, Section 11.6.1
Want-Content-DigestpermanentDictionary9530RFC 9530, Section 4
Want-Digestobsoleted3230RFC 3230Obsoleted by [RFC 9530, Section 1.3: Digest Fields]
Want-Repr-DigestpermanentDictionary9530RFC 9530, Section 4
Want-Unencoded-DigestpermanentDictionary
Warningobsoleted9111RFC 9111, Section 5.5
X-Content-Type-Optionspermanent
X-Frame-OptionspermanentHTML