What does HTTP status 425 (Too Early) mean?

 
Previous Next
HTTP_STATUS_FAILED_DEPENDENCY HTTP_STATUS_UPGRADE_REQUIRED

HTTP_STATUS_TOO_EARLY

The status is intended to reduce replay risk for requests received in TLS 1.3 early data. It is most relevant to non-idempotent operations that would be unsafe to execute twice.

A client can resend the request after the TLS handshake completes. Servers should use 425 selectively and design sensitive endpoints with idempotency or replay protection.

This response is related to TLS early data and replay risk. A client can retry after the connection is fully established so the request is no longer sent as early data. It is particularly important for non-idempotent operations, where replaying a request before handshake completion could cause an action to execute more than once.

RFC 8470: Using Early Data in HTTP


Looking for a different code? Search another status or error code.