Proctor NOIDEA

SimpleHTTP postcard (koi padh le). HTTPS envelope (TLS lock).

Same headers, encrypted channel. MITM se password/token bachao. Local viva HTTP OK.

HTTP/1.1 version keep-alive. TCP neeche, TLS security layer, SMTP mail alag.

Browser + API ke beech extra darwaze: CORS origin allow, HTTPS encrypt transit, CSRF cookie-auto-send attack, XSS HTML inject, SQL injection raw query.

MAD2 SPA: Vue :8080 Flask :5000 → Flask-CORS. JWT localStorage XSS se chori ho sakta — v-html user input pe avoid. Password Network tab localhost pe dikhega; prod HTTPS, response mein password echo nahi.

401 unauthenticated, 403 unauthorized, 400 validation. Hash one-way — SHA decrypt nahi hota. Secret key .env, GitHub pe nahi.

Project example: Dev localhost http. Production https:// + cert.

Viva tipProtocols: HTTP/HTTPS app, TCP transport, TLS security, SMTP mail. HTTP/1.1 version — persistent connections.