Illustrated HTTP

Illustrated HTTP is an introductory book on the HTTP protocol written for beginners by the Japanese security expert Ueno Sen, originally titled HTTP no Kyōkasho in Japanese. The Chinese edition was translated by Yu Junliang and published by Posts & Telecom Press under its Turing Education imprint. The book opens with the everyday scenario of what happens after you type a URL into a browser's address bar, first describing the background of the Web and HTTP's creation, then systematically outlining the layered structure of the TCP/IP protocol suite, explaining how IP, TCP, DNS, and other protocols divide responsibilities and cooperate with HTTP, and clarifying the conceptual difference between URI and URL.

On this foundation, the book analyzes the core mechanisms of HTTP/1.1 one by one: the structure of request and response messages, the semantics of methods such as GET and POST and of status codes, persistent connections and pipelining, Cookie-based state management, the encoding differences between message bodies and entity bodies, multipart object collections and range requests, content negotiation, and how Web servers cooperate through proxies, gateways, tunnels, and caches. The latter half moves into practical and security territory, covering the classification and purposes of HTTP header fields, the encryption and authentication systems of HTTPS, Basic, Digest, and SSL client authentication and form-based authentication, HTTP extension protocols such as SPDY and WebSocket, and common Web attack techniques such as insufficient output escaping, design flaws, and negligent session management.

The book's defining feature is its use throughout of two-color communication diagrams alongside the text, turning abstract protocol interactions into round-trip flows between client and server; the text is concise but dense with key points. It suits front-end, back-end, and operations personnel as their first book on the protocol, helping readers make sense of packet capture data and understand the conventions behind interface design, though it should be noted that the book was completed before HTTP/2 became an official standard, so the relevant chapters are best read alongside more up-to-date material.