HN Explorer

Ask HN: Best online resources for learning web security

21 points by TXV ↗ HN
I find myself rather lacking in web security skills. I have a basic understanding of what TLS/certs/CAs/... are, gotten mainly from Wikipedia and blog articles but I often don't know how to make it all work together. What do you think is the best comprehensive online (free) resource to learn the ropes?

12 comments

[ 3.0 ms ] story [ 33.1 ms ] thread
cypherg
There isn't a single reputable one that I know of.
csnewb
Try searching for a pdf of the "Web Application Hacker's Handbook".
phaus
Or he could just buy it. It's well worth the price.
csnewb
He asked for an online resource, I gave him one. No shit buying the book itself is better.
grzm
Is the PDF legally available online? The sources I see don't appear to be.
csnewb
I don't think it is legally available online. Getting the physical book would be the best option since its legal and more thorough than any online resource I've found, but I don't know what your budget is like or if you even like reading books. Just saying that its one option you have.
phaus
In about 30 seconds I found several places to get it as an ebook, and at least 3 that have PDFs.

O'Reilly's a good place to buy from.

[deleted]
(comment deleted)