What does HTTP status code 425 mean?
The 425 Too Early status code indicates that the server refuses to process the request because it might be replayed (e.g., replay attacks on 0-RTT TLS connections).
When to use it in APIs
Typically handled at the gateway/load-balancer level to protect mutation endpoints (like POST payments) from replay attacks.
How it compares to other codes
- 429 Too Many Requests: Deals with client quotas. 425 deals with TLS/network connection replay risks.