pre lecture 2 updates

_includes/class_info.md

@@ -6,19 +6,16 @@
 ## Instructor
 
 - [{{site.instructor}}]({{site.instructor_url}})
-- <{{site.instructor_email}}>
+- [email](mailto:{{site.instructor_email}})
 
 ## UCSB TA
 
 - TBD
-<!-- - Bhavye Jain -->
-<!-- - <[email protected]> -->
 
 ## Appfolio TA
 
-- TBD
-<!-- - Shubham Talbar -->
-<!-- - <[email protected]> -->
+- Maximilian Medearis
+- [email](mailto:[email protected])
 
 {% if site.piazza_url %}
 Please use [Piazza]({{site.piazza_url}}) for class-related correspondance.
@@ -35,17 +32,17 @@ Please use [Piazza]({{site.piazza_url}}) for class-related correspondance.
 
 ### Office Hours
 
-- TBD
+<!-- - TBD
 
-<!-- In-person
+In-person
 
-- Wednesday 10 -- 11am, Phelps 2510
-- Thursday 3 -- 4pm, Phelps 2510
+- Tuesday 8am -- 9am, Phelps 3526
+- Thursday 8am -- 9am, Phelps 3526 -->
 
 Virtual
 
-- Thursday 2 -- 3pm, link in [Piazza]({{site.piazza_url}})
-- Friday 1 -- 2pm, link in [Piazza]({{site.piazza_url}}) -->
+- Tuesday 4 -- 5pm, link in [Piazza]({{site.piazza_url}})
+- Friday 4 -- 5pm, link in [Piazza]({{site.piazza_url}})
 
 ### Initial tasks due before
 
@@ -126,5 +123,6 @@ _[Available online](https://hpbn.co/)._
 Note: The online version is slightly more up-to-date.
 
 [The Ruby On Rails Tutorial](https://www.railstutorial.org/book)  
-_[Complete 3rd edition available online](https://3rd-edition.railstutorial.org/book)_  
+<!-- _[Complete 3rd edition available online](https://3rd-edition.railstutorial.org/book)_   -->
+Optional
 Note: This book is only useful once we get to the primary project.

schedule.md

@@ -17,7 +17,7 @@ The following schedule is subject to change, and many slide links are not yet ac
 
 ### Topics
 
-- Course Introduction
+- Course Introduction - [slides](/slides/2024f/01_course_introduction/index.html)
 
 ### Tasks
 
@@ -35,7 +35,7 @@ The following schedule is subject to change, and many slide links are not yet ac
 
 ### Topics
 
-- Hypertext Transfer Protocol (HTTP)
+- Hypertext Transfer Protocol (HTTP) - [slides](/slides/2024f/02_http/index.html)
 - HTTP Servers
 - Application Servers
 
@@ -206,7 +206,7 @@ The following schedule is subject to change, and many slide links are not yet ac
 
 ### Topics
 
-<!-- - #### Wednesday December 6: Zoom Guest Lecture -->
+- Guest Lecture (Tu 12/3)
 - Scalable Machine Learning Inference
 
 ### Tasks

slides/2024f/02_http/index.html

@@ -199,6 +199,12 @@
 
 > When might you want to use HTTP HEAD?
 
+???
+
+* To check if a resource exists
+* CHeck the size of a resource
+* To check if a resource has changed (last-modified)
+
 ---
 
 # HTTP Method/Verb Misuse
@@ -210,6 +216,14 @@
 ```http
 GET /post/5?action=hide
 ```
+???
+
+Common Problems:
+* Using GET for actions that change server state
+* Using POST for idempotent actions
+* Using PUT for creating resources
+* Using DELETE for non-idempotent actions
+* Using GET to send data to the server, not prohibited but not recommended
 
 --
 
@@ -425,6 +439,23 @@
 
 > What security concerns may exist with cookies?
 
+???
+
+Uses of cookies:
+* Authentication
+* Session state
+* Personalization
+* Tracking
+* User preferences
+* Shopping cart
+* Advertising
+* Analytics
+
+Security concerns:
+* Cross-site scripting
+* Stolen cookies (stolen session)
+
+
 ---
 
 # Other HTTP Headers
@@ -446,6 +477,18 @@
 `X-` prefixed headers are not part of the official specification and may later
 become _standardized_.
 
+???
+
+* ETAG - Entity Tag, a unique identifier for the resource used for caching
+* Date - Date of the response
+* Last-Modified - Date the resource was last modified
+* Cache-Control - Cache control directives, used to indicate boundaries of caching (e.g., no-cache, max-age)
+* Age - Age of the resource in the cache
+
+* Content-Security-Policy - specifies where resources can be loaded from
+* Strict-Transport-Security - Forces the browser to use HTTPS
+* X-Frame-Options - Prevents the resource from being embedded in an iframe
+
 ---
 
 class: center inverse middle
@@ -680,7 +723,7 @@ <h1>HTTP is easy!</h1>
 
 # More Speed
 
-A single web page may have tens of resources. In practice obtaining each
+A single web page may have tens or even hundreds of resources. In practice obtaining each
 resource serially over the same TCP connection is too slow.
 
 > What can be done to get more speed?
@@ -746,6 +789,16 @@ <h1>HTTP is easy!</h1>
 
 .center[![Chrome Network Table](developer_tools_waterfall.png)]
 
+???
+
+Stop here for demo of chrome developer tools and network tab:
+
+Visit a website and open the developer tools. Look at the network tab
+
+* /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --user-data-dir="/tmp/no_http_3_profile"
+* chrome://flags/
+* /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --user-data-dir="/tmp/no_http_2_profile" --disable-http2
+
 ---
 
 class: center middle inverse