The Hypertext Transfer Protocol governs virtually all web communication. Understanding its mechanics at the specification level is prerequisite to identifying and exploiting web vulnerabilities.