Skip to content
HTTP QUERY packet in transit between client and server

HTTP has a new method.

The first in 16 years. RFC 10008 defines QUERY — a GET with a body. Safe. Idempotent. Cacheable. No more HTTP crimes.

Safe & Idempotent

Like GET — can be retried without side effects. Proxies, browsers, and crawlers know it’s safe.

Request body allowed

Like POST — send complex queries, nested filters, and structured payloads in the request body. No more 2000-char query strings.

Cacheable

Proxies and CDNs can cache QUERY responses using Content-Digest. The caching POST never had.

Official standard

RFC 10008, published June 2026. Internet Standards Track. Authors from Cloudflare, Akamai, and greenbytes.

Supported today

Express, Fastify, Go net/http, httpx (Python), undici (Node.js) — frameworks already implement it. Start now.

Ready-to-run examples

Executable code in Node.js, Go, Python, PHP, and curl. Copy, paste, run.

3,775
Reddit upvotes

1,023
X likes

645
Hacker News points


“Every time you use POST for a read-only query, you are committing an HTTP crime.”
— The community, before RFC 10008