Direct, self-contained definitions and operational breakdowns for modern networking, web security, identity standards, APIs, and cryptographic primitives. Every concept begins with an unambiguous, direct answer.
The Domain Name System (DNS) is a globally distributed, hierarchical naming database that translates human-readable hostnames (such as curious-techie.com) into machine-routable IP addresses (such as 104.21.58.12 or 2606:4700:3033::6815:3a0c).
Transmission Control Protocol (TCP) is a core transport-layer internet protocol defined in RFC 9293 that establishes connection-oriented, reliable, ordered, and error-checked byte streams between computing applications over an unreliable IP network.
User Datagram Protocol (UDP) is a minimal, connectionless transport-layer protocol defined in RFC 768 that transmits independent message packets (datagrams) with zero connection handshake, zero delivery guarantee, and minimal protocol overhead.
Internet Protocol Version 4 (IPv4) is the foundational network-layer routing protocol of the internet, defined in RFC 791, that identifies connected devices using 32-bit numerical addresses formatted in dotted-decimal notation (e.g. 192.0.2.1).
Internet Protocol Version 6 (IPv6) is the next-generation network-layer communications protocol defined in RFC 8200, designed to replace IPv4 by utilizing 128-bit addresses formatted as eight colon-separated hexadecimal groups (e.g. 2001:0db8:85a3::8a2e:0370:7334).
A reverse proxy is an intermediate server or gateway situated in front of backend web servers that intercepts client requests, forwards them to appropriate internal upstream services, and returns the server’s response to the client as if the reverse proxy itself had generated the content.
A Content Delivery Network (CDN) is a geographically distributed network of proxy servers and data centers (Points of Presence, or PoPs) designed to deliver web content, static assets, video streams, and dynamic APIs to internet users with ultra-low latency and high availability.
Hypertext Transfer Protocol (HTTP) is the foundational application-layer protocol of the World Wide Web, defined in RFC 9110, that governs how web browsers, mobile apps, and servers exchange hypermedia documents, JSON payloads, and API resources.
Hypertext Transfer Protocol Secure (HTTPS) is an extension of HTTP, defined in RFC 2818, that encrypts all bidirectional communication between a web client and server using Transport Layer Security (TLS).
Transport Layer Security (TLS) is an authoritative cryptographic protocol, defined in RFC 8446 (TLS 1.3), designed to establish secure, authenticated, and tamper-proof communications over computer networks.
An HTTP cookie (web cookie) is a small key-value data packet (up to 4KB) sent by a web server via the `Set-Cookie` response header and stored by the user’s web browser, defined in RFC 6265.
Cross-Origin Resource Sharing (CORS) is a browser-enforced security mechanism defined in the WHATWG Fetch Standard that allows a server to explicitly declare which foreign origins (combination of protocol, domain, and port) are permitted to read its resources via client-side JavaScript.
Content Security Policy (CSP) is a standardized HTTP response header (`Content-Security-Policy`), defined by the W3C, that restricts the sources from which a browser is allowed to load scripts, stylesheets, images, fonts, frames, and network connections.
Cross-Site Scripting (XSS) is a severe code injection vulnerability (CWE-79) where an attacker tricks a web application into delivering malicious client-side JavaScript to an unsuspecting user’s web browser.
Cross-Site Request Forgery (CSRF or XSRF) is an attack (CWE-352) that tricks an authenticated end user’s web browser into executing unwanted, unauthorized actions on a trusted web application in which the user is currently authenticated.
A JSON Web Token (JWT, pronounced "jot") is an open, industry-standard format defined in RFC 7519 for representing claims securely and compactly between two parties as a digitally signed JSON object.
OAuth 2.0 is an industry-standard open authorization protocol, specified in RFC 6749, that enables third-party applications to obtain limited, delegated access to a user’s web resources without ever exposing or sharing the user’s master account credentials.
OpenID Connect (OIDC) is an identity layer built directly on top of the OAuth 2.0 authorization framework, standardized by the OpenID Foundation, that allows client applications to verify the identity of an end user based on the authentication performed by an Authorization Server.
An Application Programming Interface (API) is a formal software contract, communication protocol, and programmatic interface that allows two or more distinct software programs to exchange data and invoke functionality without either system needing to understand the internal source code or architecture of the other.
Representational State Transfer (REST) is an architectural style designed by Roy Fielding in 2000 that outlines six guiding constraints for building scalable, stateless, and cacheable networked hypermedia applications over HTTP.
GraphQL is an open-source data query and manipulation language for APIs, created by Meta (Facebook) in 2012 and open-sourced in 2015, paired with a server-side runtime for executing queries against a strongly typed schema.
A cryptographic hash function is a one-way mathematical algorithm that takes an arbitrary-sized block of input data and computes a unique, fixed-size string of characters called a cryptographic digest or hash value.
Encryption is the cryptographic process of transforming plaintext information into unreadable ciphertext using a mathematical algorithm (cipher) and a secret key, ensuring that only authorized parties holding the matching decryption key can read the original data.
Encoding is the algorithmic transformation of data from one representation or format into another using a publicly standardized, reversible translation rule, ensuring the data can be safely processed, stored, or transmitted across heterogeneous computing systems.
Base64 is a binary-to-text encoding scheme defined in RFC 4648 that represents arbitrary 8-bit binary data as a sequence of printable ASCII characters chosen from a 64-character radix alphabet (A–Z, a–z, 0–9, "+", and "/").
A Universally Unique Identifier (UUID), also known as a GUID in Microsoft ecosystems, is a 128-bit numerical label standardized in RFC 9562 used to uniquely identify resources in distributed computer systems without requiring central registry coordination.
Try adjusting your keyword or reset filters to see all 26 concepts.