Or just read the RFCs tbh. I keep them indexed locally as text, it’s super useful for finding random garbage that may not pop up from a search.

There's a lot of stuff that looks officious enough that will trick folks, especially those distracted or not well-versed in the attack vector.