Official solution
SimpleHTTP postcard (koi padh le). HTTPS envelope (TLS lock).
Same headers, encrypted channel. MITM se password/token bachao. Local viva HTTP OK.
HTTP/1.1 version keep-alive. TCP neeche, TLS security layer, SMTP mail alag.
Browser + API ke beech extra darwaze: CORS origin allow, HTTPS encrypt transit, CSRF cookie-auto-send attack, XSS HTML inject, SQL injection raw query.
MAD2 SPA: Vue :8080 Flask :5000 → Flask-CORS. JWT localStorage XSS se chori ho sakta — v-html user input pe avoid. Password Network tab localhost pe dikhega; prod HTTPS, response mein password echo nahi.
401 unauthenticated, 403 unauthorized, 400 validation. Hash one-way — SHA decrypt nahi hota. Secret key .env, GitHub pe nahi.
Project example: Dev localhost http. Production https:// + cert.
Viva tipProtocols: HTTP/HTTPS app, TCP transport, TLS security, SMTP mail. HTTP/1.1 version — persistent connections.