425 Too Early
The server will not process a request that might be replayed.
What it means
Related to TLS 1.3 early data, which an attacker could replay.
What your client should do
Retry after the TLS handshake completes. Most clients do this automatically.
Should you retry?
Yes, with exponential backoff and jitter, and only for idempotent requests (GET, PUT, DELETE) or requests protected by an Idempotency-Key.
Try it
The free practice API returns this status on demand, with the headers a well-behaved API would send. Call GET /api/play/status/425 from Endpoint Client and open the Explain tab.
Defined in RFC 8470. All status codes and headers