Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

HTTP

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Andrew Liu Andrew Liu
March 28, 2012
Programming
1.5k
17

 HTTP

2012 CCSP

Avatar for Andrew Liu

Andrew Liu

March 28, 2012

More Decks by Andrew Liu

See All by Andrew Liu
Facebook Graph API
Avatar for Andrew Liu eggegg
7
700
Version Control System - Git
Avatar for Andrew Liu eggegg
4
720
Introduction to Ruby
Avatar for Andrew Liu eggegg
3
660
Defly
Avatar for Andrew Liu eggegg
0
390

Other Decks in Programming

See All in Programming
dotNET_vulnclicker_intro.pdf
Avatar for Tomohiko Morita deka_morita
0
140
RAG の “R” を Swift で覗いてみる 〜「意味から探す」検索の仕組み〜
Avatar for Nao-RandD nao_randd
0
160
Jetpack Compose Mechanisms
Avatar for Jaewoong skydoves
3
820
Simple Storage Service(S3) is not simple
Avatar for Yura Iwatsuka iwatsukayura
0
290
すこし踏み込む CancellationToken
Avatar for tkym htkym
2
1.7k
設計次第でAIコードの読む量は減らせる / designing-for-code-reading
Avatar for MinoDriven minodriven
35
17k
コードで差別化できない時代の ソフトウェアエンジニアリング / Software Engineering in an Era Where Code Doesn’t Differentiate
Avatar for Naoki Kishida kishida
2
180
コーディング自動化の次へ。人の介入をゼロにするファクトリーとサポートAIによる実践
Avatar for Seiji Takahashi timakin
4
3.5k
全ての永続トークンを、生まれる前に消し去りたい！
Avatar for sylph01 sylph01
2
880
ハーネス設計入門 〜 基礎知識の整理から実務へのステップアップ 〜
Avatar for kinopee kinopeee
28
32k
半永久的に提供し続けられるプライベートクラウドを目指して ― 利用者の認知負荷を抑えるAPI抽象化とハードウェア世代交代の基盤設計
Avatar for Tomofumi Kondo tomokon
0
500
AWS CDKのカスタムリソースでContinuum（旧Security Agent）を実装した話 | Implementing Continuum (formerly Security Agent) via AWS CDK Custom Resource
Avatar for アキキー | Akihisa Ikeda akihisaikeda
2
150

Featured

See All Featured
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
Avatar for Liv Day livdayseo
0
220
Public Speaking Without Barfing On Your Shoes - THAT 2023
Avatar for David Neal reverentgeek
1
600
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.9k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
31
3.4k
Ten Tips & Tricks for a 🌱 transition
Avatar for Manu Carrasco Molina stuffmc
1
270
WCS-LA-2024
Avatar for Leonardo Collado-Torres lcolladotor
0
890
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
600
Designing Experiences People Love
Avatar for Jonathan Moore moore
143
24k
Winning Ecommerce Organic Search in an AI Era - #searchnstuff2025
Avatar for Aleyda Solis aleyda
2
2.2k
Effective software design: The role of men in debugging patriarchy in IT @ Voxxed Days AMS
Avatar for Kenny Baas-Schwegler baasie
1
570
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
370
Getting science done with accelerated Python computing platforms
Avatar for Jacob Tomlinson jacobtomlinson
2
540

Transcript

  1. HTTP Andrew Liu

  2. Hypertext Transfer Protocol

  3. Hypertext Transfer Protocol <a href=”https://www.facebook.com/mikechencom”>Prof. Mike</a>

  4. URL - Uniform Resource Locator https://www.facebook.com/prof.mike.chen

  5. URL - Uniform Resource Locator https://www.facebook.com/prof.mike.chen scheme name http https

    spdy

  6. URL - Uniform Resource Locator https://www.facebook.com/prof.mike.chen scheme name http https

    spdy authority

  7. URL - Uniform Resource Locator https://www.facebook.com/prof.mike.chen scheme name http https

    spdy authority path

  8. Mike

  9. Mike Hi Mike, How are you?

  10. Mike Hi Mike, How are you? #@!@#!#$#@$

  11. Mike

  12. Mike Hi Mike, How are you?

  13. Mike Hi Mike, How are you? Fine

  14. Mike Hi Mike, How are you? Fine english://mike/status

  15. www.facebook.com https://www.facebook.com/prof.mike.chen

  16. www.facebook.com GET /prof.mike.chen HTTP/1.1 https://www.facebook.com/prof.mike.chen

  17. www.facebook.com GET /prof.mike.chen HTTP/1.1 <html>.... https://www.facebook.com/prof.mike.chen

  18. Real case: request GET / HTTP/1.1 Host: www.facebook.com Connection: keep-alive

    Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.83 Safari/535.11 Accept: text/html,application/xhtml+xml,application/ xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip,deflate,sdch Accept-Language: zh-TW,zh;q=0.8,en-US;q=0.6,en;q=0.4 Accept-Charset: UTF-8,*;q=0.5 Cookie: ....

  19. www.facebook.com GET / HTTP/1.1 <html>.... https://www.facebook.com/

  20. www.facebook.com GET / HTTP/1.1 <html>.... https://www.facebook.com/ How does it know

    I have logged in?

  21. HTTP is Stateless Server doesn’t know what the user did

    last time.

  22. www.facebook.com

  23. www.facebook.com Hi, I’m Mike.

  24. www.facebook.com Hi, I’m Mike. Ok, you’re Mike.

  25. www.facebook.com Hi, I’m Mike. Ok, you’re Mike. Everyone can be

    Mike now!

  26. www.facebook.com

  27. www.facebook.com Hi, I’m Mike. My password is “lab430”.

  28. www.facebook.com Hi, I’m Mike. My password is “lab430”. Ok, you’re

    Mike. Code: a3ad31

  29. www.facebook.com Hi, I’m Mike. My password is “lab430”. Ok, you’re

    Mike. Code: a3ad31 My code is a3ad31.

  30. www.facebook.com Hi, I’m Mike. My password is “lab430”. Ok, you’re

    Mike. Code: a3ad31 My code is a3ad31. Ok, you’re Mike.

  31. www.facebook.com Hi, I’m Mike. My password is “lab430”. Ok, you’re

    Mike. Code: a3ad31 Browser must remember the code! My code is a3ad31. Ok, you’re Mike.

  32. Cookie to Rescue

  33. Cookie to Rescue Key - value pair storage

  34. Cookie to Rescue Key - value pair storage Sent every

    time in HTTP request header Cookie: km_dbg=0; heroku_session_v=1; ...

  35. Real case: response HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store,

    must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Content-Type-Options: nosniff X-Frame-Options: DENY Set-Cookie: _e_1V7k_5=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.facebook.com; httponly Set-Cookie: L=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.facebook.com; httponly Set-Cookie: wd=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.facebook.com; httponly Content-Encoding: gzip Content-Type: text/html; charset=utf-8 X-FB-Debug: XKkfgkQmkDwO4VsOafKYEhfDbYk9WN8ANLHRCrl/9eU= X-Cnection: close Transfer-Encoding: chunked Date: Tue, 27 Mar 2012 13:16:47 GMT

  36. HTTP Status Code

  37. HTTP Status Code 2XX Success 200 OK

  38. HTTP Status Code 2XX Success 200 OK 3XX Redirection 301

    Move Permanently 302 Found (a.k.a. Moved Temporarily) 304 Not Modified

  39. HTTP Status Code 2XX Success 200 OK 3XX Redirection 301

    Move Permanently 302 Found (a.k.a. Moved Temporarily) 304 Not Modified 4XX Client Error 400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found

  40. HTTP Status Code 2XX Success 200 OK 3XX Redirection 301

    Move Permanently 302 Found (a.k.a. Moved Temporarily) 304 Not Modified 4XX Client Error 400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 5XX Server Error 500 Internal Server Error

  41. Advanced Topics

  42. mikechen.com

  43. mikechen.com http://mikechen.com/

  44. mikechen.com GET / HTTP/1.1 http://mikechen.com/

  45. mikechen.com GET / HTTP/1.1 <html>... http://mikechen.com/

  46. mikechen.com GET / HTTP/1.1 <html>... http://mikechen.com/

  47. mikechen.com

  48. mikechen.com http://mikechen.com/

  49. mikechen.com Modified? http://mikechen.com/

  50. mikechen.com Modified? No! http://mikechen.com/

  51. mikechen.com Modified? No! http://mikechen.com/

  52. HTTP Request Header

  53. HTTP Request Header Host Host: www.apple.com

  54. HTTP Request Header Host User-Agent Host: www.apple.com User-Agent: Mozilla/5.0 (Windows;

    U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)  

  55. HTTP Request Header Host User-Agent Accept-Language Host: www.apple.com User-Agent: Mozilla/5.0

    (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)   Accept-Language: en-us,en;q=0.5

  56. HTTP Request Header Host User-Agent Accept-Language Accept-Encoding Host: www.apple.com User-Agent:

    Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)   Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate

  57. HTTP Request Header Host User-Agent Accept-Language Accept-Encoding If-Modified-Since Host: www.apple.com

    User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)   Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate If-Modified-Since: Sat, 28 Nov 2009 06:38:19 GMT

  58. HTTP Request Header Host User-Agent Accept-Language Accept-Encoding If-Modified-Since Referer Host:

    www.apple.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)   Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate If-Modified-Since: Sat, 28 Nov 2009 06:38:19 GMT Referer: www.google.com

  59. HTTP Response Header

  60. HTTP Response Header Cache-Control Cache-Control: max-age=3600, public

  61. HTTP Response Header Cache-Control Content-Encoding Cache-Control: max-age=3600, public Content-Encoding: gzip

  62. HTTP Response Header Cache-Control Content-Encoding Content-Type Cache-Control: max-age=3600, public Content-Encoding:

    gzip Content-Type: text/html; charset=UTF-8

  63. HTTP Response Header Cache-Control Content-Encoding Content-Type Content-Disposition Cache-Control: max-age=3600, public

    Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Content-Disposition: attachment; filename=”ccsp.pdf”

  64. HTTP Response Header Cache-Control Content-Encoding Content-Type Content-Disposition Content-Length Cache-Control: max-age=3600,

    public Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Content-Disposition: attachment; filename=”ccsp.pdf” Content-Length: 79324

  65. HTTP Response Header Cache-Control Content-Encoding Content-Type Content-Disposition Content-Length Location Cache-Control:

    max-age=3600, public Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Content-Disposition: attachment; filename=”ccsp.pdf” Content-Length: 79324 Location: http://ntumobile.org

  66. HTTP Verbs

  67. HTTP Verbs GET GET /books read

  68. HTTP Verbs GET POST GET /books read POST /books create

  69. HTTP Verbs GET POST PUT GET /books read POST /books

    create PUT /books/hunger-game update

  70. HTTP Verbs GET POST PUT DELETE GET /books read POST

    /books create PUT /books/hunger-game update DELETE /books/hunger-game delete
  71. None
  72. None

  73. <form method=”get” action=”/search”> <input type=”text” name=”q”> </form> or

  74. <form method=”get” action=”/search”> <input type=”text” name=”q”> </form> or GET /search?q=mike+chen

    HTTP/1.1 Host: www.google.com.tw User-Agent: Mozilla/4.0

  75. { :q => “mike chen” } <form method=”get” action=”/search”> <input

    type=”text” name=”q”> </form> or GET /search?q=mike+chen HTTP/1.1 Host: www.google.com.tw User-Agent: Mozilla/4.0
  76. None

  77. <form method=”post” action=”/login”> <input type=”text” name=”user”> <input type=”password” name=”password”> <input

    type=”submit” value=”Submit”> </form>

  78. <form method=”post” action=”/login”> <input type=”text” name=”user”> <input type=”password” name=”password”> <input

    type=”submit” value=”Submit”> </form> POST /login HTTP/1.1 Host: ccsp2012.org User-Agent: Mozilla/4.0 Content-Length: 25 Content-Type: application/x-www-form-urlencoded user=mike&password=lab430

  79. END