CIS 658

Exploring HTTP

Winter 2019
Based on an assignment originally developed by Prof. Engelsma

Objective

The objective of this lab is to help the student develop a deeper understanding of the HTTP protocol. Upon completion of this homework the student will: Please work in pairs to complete this exercise during the allotted time in class.

Hands-on with HTTP

We're going to explore the HTTP protocol first-hand by examining its behavior when we interact with the various websites. We will use Chrome's Developer Tools to examine the underlying HTTP behavior. (Other web browsers have tools similar to Chrome's Developer Tools.)
Step 1:
Familiarize yourself with the built-in developer features in Chrome, or equivalent features in other browsers. (From the Chrome menu, go to More Tools -> Developer Tools. If you have trouble see this diagram.)
Step 2:
Open a private browsing window. (This step is important.)
Step 3:
Open the Developer Tools, click on the "Network" tab, and check the "Disable cache" box
Step 4:
With Developer Tools open, click on the tab labeled "Network", then load the pagge https://cis.gvsu.edu/~kurmasz/Humor/engin.html Important: Makesureyou areusing https not http
Step 5:

Select and expand the HTTP message labeled "engin.html". Make sure the Headerstab is selected, then look through the General section for the Status Code

  1. What is the Status Code; and what does it signify?
  2. What would the status code be if you mis-typed "engin"?
  3. Test your answer to the previous question by trying to fetch https://cis.gvsu.edu/~kurmasz/Humor/engin.html (notice the misspelling).
Step 6:

Examine the request headers for your call to https://cis.gvsu.edu/~kurmasz/Humor/engin.html.

  1. Are request headers sent by the browser or the web server?
  2. What is the value of the User-Agent header?
  3. What is the purpose of the User-Agent header?
  4. What is the value of the Accept header?
  5. What is the purpose of the Accept header? (Hint: Look here.)
  6. What is the value of the Cache-Control header?
  7. Why is Cache-Control set that way?
Step 7:
Now, examine the response headers for your call to https://cis.gvsu.edu/~kurmasz/Humor/engin.html.
  1. What is the value of the Content-Type header?
  2. What is the purpose of the Content-Type header?
  3. List the other response headers and briefly describe their purpose.
Step 8:
View the actual payload of the HTTP response by clicking on the "Response" tab.
  1. What kind of data was received? Does it match the Content-Type header?
Step 9:
Uncheck the "Disable Cache" box and reload the page.
  1. What is the status code? (If the Status Code is still 200, try refreshing again.)
  2. What is the purpose of this status code? What is the benefit of returning this code instead of 200?
Step 10:
load the page http://cis.gvsu.edu/~kurmasz/Humor/engin.html Notice that you are using http instead of https
  1. What is the status code? What does this status code indicate?
  2. What previously unseen response header did the server return when you requested the "http" page?
  3. How did your browser respond to this code?

Updated Thursday, 10 January 2019, 8:51 PM

W3c Validation