Security is a very important topic when it comes to deploying web applications to production. This topic is massive and can take chapters to cover, if not books. Since the purpose of this book is to cover practical hands-on topics and be to the point, we will cover the most vital nuggets of knowledge that are needed to build a secure web application.
Secure web applications primarily rely on encrypting the data between the web client (browser) and the web server. In other words, they rely on encrypting the data between the frontend and the backend.
As we mentioned earlier, HTTP is the protocol that's utilized between web clients and web servers. HTTP can be secured through a protocol that is known as TLS (Transport Layer Security). The combination of HTTP and TLS is commonly known as HTTPS.