Concepts a web application developer should know?
- by iama
I think it is imperative for web application developers to know the answers surrounding the following general questions on web development irrespective of the programming language/framework used.
What authentication mechanisms HTTP offer & what are their pros and cons?
Why should one go for FORMS authentication?
How to secure authentication or for that matter any transactions via HTTP?
How to maintain state in HTTP?
What are the downsides to maintaining state via cookie & what happens when browsers disable them?
Security issues like cross site scripting, session hijacking etc.
What other questions a web developer should have answers for similar to the ones above that are programming language/web framework agnostic?