GraphQL

HTTP QUERY is a new method that behaves like GET but legally carries a request body. It's meant to be safe, idempotent and cacheable (as long as the cache key includes the body), solving the mess of giant query-string URLs and the unreliability of bodies on GET.

The skeptics' best point: a new verb doesn't fix old middleboxes any faster than standardizing GET-with-body would. The believers' rebuttal is concrete — engineers report WAFs and API gateways that already silently strip bodies off GET requests, breaking the hack in production.