Proposing a new HTTP version

1. Introduction
A new HTTP version is proposed in this document, the noob version.
The purpose of this new HTTP version is not discussed here, a separate document will detail this aspect.

2. Specifications
The version of an HTTP request message is indicated by an HTTP-Version field in the first line of the message:
HTTP-Version   = “HTTP'” “/” “noob”

An application that sends a request message that includes this version can omit the “HTTP” parameter:
HTTP-Version   = “noob”

Compliant applications must support this HTTP version at least with the GET method.

Compliant applications should reply with any supported HTTP version.

We require the Host header with this HTTP version to avoid certain issues, like a response with a Johnny Cash finger image(on certain web sites). In this case we recommend an OFR(Optical Finger Recognition) over Johnny Cash’s finger in order to establish if it’s genuine.

3. Example
- For a GET request:
GET / HTTP/noob
GET / noob

4. Security Considerations
None, attackers are not allowed to use this HTTP version.

5. Early implementations
We are extremely pleased to announce that Apache HTTPD is one of the very first servers compliant with the noob HTTP version specifications. Therefore, if such request is made against an Apache 2.2.x server, a HTTP/1.1 200 OK response will likely be received.

Comments (2) -

  • Adrian,

    I was approached by a somewhat angry and confused Apache Web admin. He was complaining that his logs were full of GET / noob commands from IP addresses managed by the Windows Admin group.

    When I showed him the above proposed HTTP version document, his face went a funny colour and he lost the ability to speak coherently.  
    Is this a common occurrence with the new HTTP? Should we be worried for other Apache web admins? Does a further sub-section need to be added to the proposal warning on this odd reaction of loss of humour and over reacting?

    Concerned of Sydney
    • Tell him not to worry about a thing.
      It should occur only on 1 April.

Comments are closed