While I agree that it would be very nice to have it specified in the header, RFC 7231 on HTTP/1.1 (2014) specifies the default character encoding is that of the media type, and RFC 4627 on application/json (2006) specifies the default character encoding to be UTF-8.