HTTP 425 Too Early

The server is unwilling to risk processing a request that might be replayed.

Use 425 with replay-sensitive early data when the request is not safe to process yet.

httpstatus codetlsreplay

Response (http)

HTTP/1.1 425 Too Early

Use 425 with replay-sensitive early data when the request is not safe to process yet.

Common mistakes

Accepting Early-Data blindly; 425 exists so replayable requests can be rejected before processing.

Registry reference: rfc8470

Sources