Hi,
I don’t know them by heart, but I can tell you for sure that all of them are POSTs. You just have to sniff a valid RTMPT connection and you will see that there is only a bunch of them (5 or 6). It is standard HTTP, just that the payload is that weird RTMP. If it wouldn’t be standard HTTP, it would defeat the very purpose of having an easy way in/out of organisations, including tunnelling it through proxy servers. Bottom line, all HTTP paradigms can be applied
Best regards,
Andrei