Course 10 · Foundation

The Web
What happens between the click and the pixel.

DNS, TCP, TLS, HTTP, caching, cookies, CORS and the rendering pipeline — the layer every framework sits on and nobody teaches.

18Lessons
≈ 4hReading
18Playable now
HTTPCachingCookiesCORSRenderingPerformance

0 of 18 lessons finished — nothing yet

The syllabus

18 lessons,
in the order they build on each other.

Start lesson one ↗
01

A URL, and finding the server

Every part of a URL, what DNS actually answers, and why the first request is the slow one.

≈ 11 min
02

TCP, TLS and the handshake

What is set up before a single byte of your request is sent, and what HTTPS does and does not protect.

≈ 12 min
03

The request and the response

Methods, paths, versions, status codes — the anatomy of both messages, byte by byte.

≈ 12 min
04

The headers that matter

Content type, length, encoding, language, and the ones that change how the browser behaves.

≈ 12 min
05

Redirects

301, 302, 303, 307, 308 — which ones change the method, and which ones are forever.

≈ 11 min
06

Caching

Cache-Control, freshness, immutable assets, and why your users still see last week’s CSS.

≈ 14 min
07

Conditional requests

ETag, Last-Modified and the 304 that sends no body at all.

≈ 12 min
08

Cookies

Attributes, scope, SameSite, and exactly which requests carry them.

≈ 13 min
09

CORS

The rule the browser enforces, the preflight, and why the error is never in your JavaScript.

≈ 14 min
10

Authentication over HTTP

Sessions, tokens, where to keep them, and what each choice costs you.

≈ 13 min
11

Security headers

HSTS, CSP, frame options, referrer policy — a few lines that close whole categories of attack.

≈ 12 min
12

HTTP/2 and HTTP/3

Multiplexing, head-of-line blocking, and which old performance advice is now wrong.

≈ 11 min
13

How a page is rendered

Parse, CSSOM, layout, paint, composite — and what forces each stage to run again.

≈ 13 min
14

The critical path

What blocks the first paint, and the handful of tags that decide how fast a page feels.

≈ 13 min
15

The event loop

Tasks, microtasks, rendering, and the long task that makes a page feel broken.

≈ 13 min
16

Where the browser keeps things

Cookies, localStorage, IndexedDB, the Cache API — size, lifetime, and who can read them.

≈ 12 min
17

Service workers and offline

A proxy you write, the cache strategies worth knowing, and how to avoid shipping a broken one.

≈ 13 min
18

Practice: read a waterfall

One slow page, one network panel, and the five questions that find the cause.

≈ 14 min