The protocol of the web — requests, responses, methods, status codes, headers, and HTTPS.
HTTP is how your browser and web servers talk to each other. Learn what a request and response look like, why it's human-readable, and how HTTPS keeps it safe.
Every page you load is a conversation: your browser asks, a server answers. Learn the anatomy of an HTTP request and response, with a real raw example you can read line by line.
A beginner-friendly tour of HTTP methods. Learn what GET, POST, PUT, PATCH, DELETE, HEAD, and OPTIONS really do, plus what safe and idempotent actually mean.
A beginner-friendly guide to HTTP status codes. Learn the 5 classes and the most common codes like 200, 301, 404, and 500 — what each one means and when you actually see it.
A beginner-friendly guide to HTTP headers — the key:value metadata that rides along with every request and response. Learn Content-Type, Authorization, Cache-Control, Set-Cookie and more, with clear examples.
What an HTTP body really is: the payload carried by requests and responses. Learn which methods send a body, how Content-Type works, and why JSON shows up everywhere.
HTTPS is just HTTP wrapped in an encrypted TLS connection. Learn what that little padlock really means, why it protects your privacy, and why every site should use it today.
HTTPS is HTTP wrapped in encryption. Learn what TLS actually does: the handshake, certificates, Certificate Authorities, and exactly what gets hidden from prying eyes.
A beginner-friendly tour of how HTTP evolved from one-request-at-a-time in HTTP/1.1, to multiplexing in HTTP/2, to QUIC-powered HTTP/3 — and why it speeds up your pages.
A beginner-friendly look at how cookies work at the HTTP level: the Set-Cookie response header, the Cookie request header, and what Expires, Secure, HttpOnly, and SameSite actually do.
A beginner-friendly guide to HTTP caching: why it speeds up the web, how Cache-Control, ETag, and Expires work, and the difference between browser and CDN caches.
Learn how MIME types and the Content-Type header tell the browser what kind of data it is receiving, why the right label matters, and a handy table of the common types.
A beginner-friendly walk through CORS: what the same-origin policy is, why browsers block cross-origin reads, and how a server opts in with Access-Control headers and preflight requests.
HTTP forgets you after every request. Learn why that statelessness is a feature, the problem it creates, and how cookies, sessions, and tokens fix it.