CONNECT Registered Not safe Not idempotent
Verified 2026-09-18 · registry updated 2026-06-17

CONNECT

Establishes a tunnel to the server identified by the request target.

Use CONNECT for proxy tunneling, such as establishing a TLS tunnel through an HTTP proxy. It is neither safe nor idempotent.

httpmethodsproxytunnel

Reference (http)

CONNECT origin.example.com:443 HTTP/1.1
Host: proxy.example.com

Use CONNECT for proxy tunneling, such as establishing a TLS tunnel through an HTTP proxy. It is neither safe nor idempotent.

Common mistakes

  • Exposing CONNECT through an origin server or proxy without strict authorization and destination controls.

Registry reference: rfc9110

Permalink: https://merginit.com/reference/http/method-connect