Glossary

71 technical terms and concepts related to network protocols, security, and status codes.

# HTTP Concepts (15)

Idempotency
Learn what idempotency means in HTTP. Understand which methods are idempotent and why it matters for retry logic and API design.
Safe Methods
Understand HTTP safe methods — GET, HEAD, OPTIONS, and TRACE. Learn why they matter for crawlers, caches, and API design.
Content Negotiation
Learn about HTTP content negotiation — how clients and servers agree on response format, language, and encoding using Accept headers.
Status Code
What is a status code? Learn about HTTP status code classes (1xx-5xx) and how other protocols use similar numeric response codes.
Reason Phrase
What is an HTTP reason phrase? Learn about status line text like 'Not Found' and why HTTP/2 removed reason phrases.
Media Type (MIME Type)
Understand MIME types and media types — how Content-Type headers identify data formats like text/html and application/json.
Response Header
What are HTTP response headers? Learn about Content-Type, Cache-Control, and other metadata fields servers send with responses.
Request Method (HTTP Verb)
Learn about HTTP request methods (GET, POST, PUT, DELETE, etc.) and their semantics for safety, idempotency, and resource operations.
Redirect
What is an HTTP redirect? Learn about 301, 302, 307, 308 status codes and how Location headers guide clients to new URLs.
Cookie
Understand HTTP cookies — Set-Cookie headers, security attributes like HttpOnly and SameSite, and how cookies enable sessions.
Session
What is an HTTP session? Learn how servers maintain state across stateless HTTP requests using session IDs and cookies.
HTTP/2
What is HTTP/2? Learn about binary framing, multiplexing, HPACK compression, and how HTTP/2 improves performance over HTTP/1.1.
HTTP/3
What is HTTP/3? Learn about QUIC transport, zero-RTT connections, and how HTTP/3 eliminates TCP head-of-line blocking.
REST (Representational State Transfer)
What is REST? Learn about RESTful API design principles, HTTP methods for CRUD operations, and how REST leverages status codes.
GraphQL
What is GraphQL? Learn how this query language differs from REST, uses a single endpoint, and handles errors in the response body.

# Security (12)

TLS Handshake
How does a TLS handshake work? Learn about the process of establishing encrypted connections, certificate verification, and TLS 1.3 improvements.
TLS Certificate (SSL Certificate)
What is a TLS/SSL certificate? Learn about digital certificates, Certificate Authorities, and how they enable HTTPS.
CORS (Cross-Origin Resource Sharing)
Understand CORS — Cross-Origin Resource Sharing. Learn how browsers enforce same-origin policy and how servers allow cross-domain requests.
Cipher Suite
What is a cipher suite? Learn about the cryptographic algorithm combinations used in TLS connections for key exchange, encryption, and integrity.
Authentication
HTTP authentication explained — Basic, Bearer, Digest schemes. Understand 401 vs 403 and how authentication works in web protocols.
XSS (Cross-Site Scripting)
What is XSS? Learn about Cross-Site Scripting attacks — stored, reflected, and DOM-based — and defenses like CSP and output encoding.
CSRF (Cross-Site Request Forgery)
What is CSRF? Learn about Cross-Site Request Forgery attacks, how cookies enable them, and defenses like CSRF tokens and SameSite.
SQL Injection
What is SQL injection? Learn how attackers exploit unsanitized inputs to manipulate databases, and how to prevent it.
HSTS (HTTP Strict Transport Security)
What is HSTS? Learn how Strict-Transport-Security forces HTTPS connections and protects against downgrade attacks.
CSP (Content Security Policy)
What is CSP? Learn how Content Security Policy headers prevent XSS attacks by controlling which resources browsers can load.
OAuth 2.0
What is OAuth 2.0? Learn about authorization grant types, access tokens, and how third-party apps access resources securely.
JWT (JSON Web Token)
What is a JWT? Learn about JSON Web Tokens — header, payload, signature structure and use in API authentication.

# Networking (13)

TCP/IP
TCP/IP fundamentals — how the internet's core protocol suite provides reliable data delivery and packet routing for HTTP, SMTP, and other protocols.
Three-Way Handshake
How does a TCP three-way handshake work? Learn about SYN, SYN-ACK, ACK and how connections are established before HTTP requests begin.
Port Number
What are port numbers? Learn about well-known ports (80, 443, 25, 53) and how they identify network services.
Latency
What is network latency? Learn how delay affects HTTP requests, what causes timeouts (408, 504), and how CDNs reduce latency.
Timeout
Understand network timeouts — connection, read, and gateway timeouts. Learn about HTTP 408 and 504 timeout status codes.
Load Balancer
What is a load balancer? Learn about L4/L7 load balancing, traffic distribution, and related errors like 502 Bad Gateway.
Reverse Proxy
Understand reverse proxies — how Nginx, HAProxy, and CDNs sit between clients and servers, and what causes 502/503/504 errors.
NAT (Network Address Translation)
What is NAT? Learn how Network Address Translation maps private to public IPs and why it complicates peer-to-peer protocols.
Firewall
What is a firewall? Learn about packet filtering, stateful inspection, and WAFs that control network traffic and protect services.
Proxy Server (Forward Proxy)
What is a proxy server? Learn how forward proxies work, differ from reverse proxies, and enable caching and access control.
DNS over HTTPS (DoH)
What is DNS over HTTPS (DoH)? Learn how encrypted DNS queries improve privacy by tunneling through HTTPS on port 443.
IPv6
What is IPv6? Learn about 128-bit addresses, why IPv6 replaces IPv4, and how AAAA records enable the transition.
Subnet (Subnetwork)
What is a subnet? Learn about IP subnetting, CIDR notation, subnet masks, and how networks are divided for performance and security.

# Protocol Design (8)

# Caching (6)

# DNS (6)

# Email (5)

# Real-Time Communication (6)