Handle extensions and invalid fields within the right scope
05Unknown parameters can be ignored without losing understood information. An invalid field is different from an invalid response, and this HTTP profile does not define MIME body-part handling.
The outer HTTP Content-Disposition is in scope. A same-named field inside a multipart part belongs to another specification, not this HTTP response-header profile.
Source for this drawing: RFC 6266 · Read RFC section 4.4 ↗
New to this? Start hereA quick picture + helpful background
A message needs an address.
Think of a packet as a small addressed envelope. Devices pass it onward; transport protocols decide what delivery promises an application gets.
Helpful first, if these ideas are unfamiliar
These pictures are analogies to help you learn. The linked RFC explains the actual rules.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
Keep extension tolerance, error recovery and protocol scope distinct.
- Recipients SHOULD ignore unrecognized parameters. Unknown disposition types have a different rule: they SHOULD be handled like attachment.
- Recipients MAY recover a usable value from an invalid field, but SHOULD NOT reject the whole message outright unless explicitly desirable, such as in a validator. Default handling is to ignore the invalid field; no first-wins or last-wins duplicate rule is mandated.
- This profile covers HTTP response headers, not Content-Disposition inside multipart payload parts. Registries are shared with MIME, but not every MIME value makes sense in HTTP. Verified erratum3475 identifies read-date, not quoted-date-time, among the MIME parameters omitted from this profile.
The sample parameter is hypothetical and unrecognized by the pictured recipient. The invalid field arrives before the receiver ignores it; it is not stopped before receipt. Source§3 allows exceptional outright rejection and optional recovery, so the shown default is not the only legal strategy. MIME multipart and email rules require their own specifications.
Read the RFC section ↗