HTTP 425 Too Early indicates the server is unwilling to risk processing a request that might be replayed. This is used with TLS 1.3 Early Data (0-RTT) to prevent replay attacks on non-idempotent requests.
The server received the request in TLS 1.3 0-RTT early data and refuses to process it due to replay risk.
The client should retry the request after the TLS handshake completes (not in early data).
Configure the server to reject 0-RTT data for endpoints that perform state-changing operations.