Methods, status codes, caching and TLS explained from first principles. Learn how the web actually moves bytes — and remember it with spaced repetition.
HTTP is the protocol every web request, API call and microservice hop runs on — yet most developers know only a handful of its rules by habit. The difference between safe and idempotent methods, why a 301 differs from a 308, or how Cache-Control really decides freshness, quietly shapes how reliable and fast your systems are.
This track grounds the protocol in the specs that define it — methods and semantics, the full status-code families, headers, cookies and caching, and the TLS handshake that turns HTTP into HTTPS — without drowning you in RFC prose.
It also covers how the protocol evolved: connection reuse in HTTP/1.1, multiplexing in HTTP/2, and QUIC in HTTP/3. Spaced repetition turns these details from "I looked that up last week" into knowledge you can reach for mid-debug.
Each module is a set of practice cards — 94 in total. Answer, review, and watch your knowledge grow from seed to full bloom.
GET, POST, PUT, PATCH, DELETE and the semantics behind safe and idempotent requests
16 cardsWhat 2xx, 3xx, 4xx and 5xx status codes mean and when servers return them
17 cardsRequest and response headers, caching with ETag and Cache-Control, and cookie attributes
16 cardsHow TLS secures HTTP with certificates, key exchange, the handshake, SNI and HSTS
15 cardsHow HTTP/1.1, HTTP/2 and HTTP/3 evolved to reduce latency and head-of-line blocking
15 cardsBasic and Bearer auth, cookies versus tokens, JWTs, sessions and CORS basics
15 cardsA taste of the real cards. Pick an answer, then reveal the explanation.
Which HTTP method is intended to retrieve a representation of a resource?
What does the 200 OK status code indicate?
What does HTTPS add on top of plain HTTP?
What did HTTP/1.1 add over HTTP/1.0 for connection reuse?
Each card is one practical concept with multiple options. Pick what you think is right.
See the correct option plus a clear explanation, and a link to deeper docs when one is available.
A spaced-repetition engine (SM-2 or FSRS) resurfaces each card just before you would forget it.
Frontend, backend, DevOps or security — they all run on HTTP. Deep fluency pays off daily.
Reading status codes, headers and cache behavior correctly turns guesswork into a quick diagnosis.
Knowing method semantics and idempotency keeps your APIs predictable and safe to retry.
HTTP semantics, caching and TLS are perennial favorites in web and systems interviews.
No. Frontend, backend, DevOps and security engineers all benefit — HTTP is the shared language of the web.
Yes. A full module covers what HTTPS adds, the TLS handshake, certificates and the trust chain.
Yes, completely free. No registration or credit card is required, and all your progress is stored locally in your browser.
It reflects the modern HTTP semantics specs and covers HTTP/1.1, HTTP/2 and HTTP/3, so the model matches today's web.
Plant your first seed today. Ten minutes a day is all it takes to understand the web from the bytes up.