• 0

The way things are done now?


Question

I know basic HTML and a tiny bit of CSS.

Things have changed majorly in the landscape, and I need to catch up on current practices.

For example, I just read that most sites are now serving content via HTTPS instead of HTTP because it's not only secure, but apparently faster.

These are the changes I need to know and why.

 

Is there some guide that can tell me what's current/best practices without a ton of reading?

Link to comment
https://www.neowin.net/forum/topic/1362722-the-way-things-are-done-now/
Share on other sites

9 answers to this question

Recommended Posts

  • 0

What exactly are you trying to achieve? your question is quite broad.

Are you trying to brush up on certain languages, technologies or simply all of modern web development? In any case, you should decide which languages you want to focus on.

 

HTTPS doesn't need much attention.. just know that it should now be used as standard, why? it's more secure, new browsers will mark your website as unsecure if not using it, Google prefers (it is a minor ranking signal). As far a development goes, and 'serving content' just make sure you're not forcing anything to be loaded as http (usually caused by referencing the full url with protocol of assets) use relative paths and you're generally good to go...

  • 0
On 5/1/2018 at 10:31 AM, Mr. Black said:

I know basic HTML and a tiny bit of CSS.

Things have changed majorly in the landscape, and I need to catch up on current practices.

For example, I just read that most sites are now serving content via HTTPS instead of HTTP because it's not only secure, but apparently faster.

These are the changes I need to know and why.

 

Is there some guide that can tell me what's current/best practices without a ton of reading?

That's a tough nut to crack. I was on the same boat, and on 2016 I decided to do something about it. Today, at least I'm a little bit aware of what's going on (There's a lot going on).

 

This is how I get up to date: 

  • InfoQ https://infoq.com
  • Google Chrome's Developer Channel https://www.youtube.com/user/ChromeDevelopers
  • JSConf Channel: https://www.youtube.com/channel/UCzoVCacndDCfGDf41P-z0iA
  • Thoughtworks Radar: https://www.thoughtworks.com/radar
  • Smashing Magazine https://www.smashingmagazine.com

I also use feedly (Configured for tech, web development, SEO), and read it once a day:

https://feedly.com

 

What's up with the web today (Not listed in order of importance): 

 

I'm going to throw super technical terms, just so you go and Google them. There's a lot to learn:

  • GPDR (https://www.eugdpr.org) - Super Important, even if you're not from Europe. 
  • HTTP/2 - HTTPS is not required for the standard. But the browsers are requiring it. Therefore it won't work on traditional HTTP. There's a service called Let's Encrypt that gives it for free (Needs renewal each 90 days). There's an app called certbot. HTTP/2 allows for something called multiplexing, and server push. 
  • Bundlers - Webpack
  • HTML 5.1
  • SPA (Single Page Applications) with libraries such as React; frameworks such as Vue, Angular, Aurelia. 
  • PWA (Progressive Web Applications) - https://developers.google.com/web/progressive-web-apps/
    • Basically it's: 
    • App Shell Architecture (Only load what the user needs to see in the first "paint"). Google more about First Meaningful Paint, and TTI (Time To Interaction)
    • Works offline with a technology called Service Workers. 
    • Notifications. 
    • Installable on Android devices.
    • You should aim to have whatever you're presenting to the user loaded in less than 3 seconds under regular 3G. Most new users are starting to enter the web in mobile devices, and we need to cater for that. Google will start penalizing sites with slow load times. 
  • Google Pagespeed, SEO, and how Google will start penalizing sites that have a low FCP, aren't mobile friendly, and aren't using HTTPS. (See above)
  • Machine Learning, which includes the overhyped Deep Learning (This is just starting to pick up). I've learned that it's overrated, and it's not a silver bullet. You are going to see the likes of Tensorflow, Keras, Gluon more common. There are courses in Coursera, and there's a paper from Gray Marcus that is worth reading. Check Reddit's Machine Learning community for more info. 
  • ECMAScript 2015+ (Previously known as ES6). This is JavaScript's standard. It started to come out annually. People use Babel as a mechanism.
  • JavaScript streams + Server Side Rendering. (To boast super high efficient web apps). 
  • Functional Programming in JavaScript, and the concept of immutability,
  • JavaScript Linters such as eslint with the AirBnB configuration (You'd learn a ton from their GitHub page)
  • TypeScript
  • Web Assembly (WASM)
  • Container, and Container Orchestration Systems: Docker, Kuberentes (Respectively).
  • Serverless Applications and services such as Amazon Lambda, Firebase, DynamoDB. Azure Functions. 
  • Puppet, Ansible, Chef for spinning up servers on the premises. 
  • Continuous Integration, Continuous Delivery, Continuous Deployment (Look for the differences, generally the Qones in last contain an additional step than the previous one didn't include).
  • The dreaded and loosely understood "Microservices" architecture. 
  • CSS Grids. Post-CSS, Auto-Prefixer, CSS Preprocessors such as SCSS (Sass). 
  • Web Components standard (It hasn't picked up. People prefer using libraries such as React, and frameworks such as Angular) 
  • WebXR, also known as Web Mixed Reality: Web AR + WebVR (Web Augmented Reality + Web Virtual Reality)
  • Analytics: Facebook Pixel, Google Analytics + others.
  • CSS Frameworks such as Bootstrap, Foundation are still used. 
  • jQuery has slimmed down considerably over the years. I try to use the platform before recurring to jQuery. Haven't used it unless a library requires it.

 

There's probably a couple of things that I'm missing. Those are the ones that are coming to mind right now.

 

Edit, here's some more info: Server Side Languages: 

 

  • PHP is still being used. It's a major player in the freelancing space. Anyone who tells you that this is complete and utter garbage, you can safely disagree. PHP has gotten better over the years with Facebook's HHVM and the glorious release of PHP 7. Wordpress, Facebook, Wikipedia are done in PHP (at least some of their parts). 
  • C#/F# with ASP.NET Core. Very underrated IMO. There's a lot going on there. It's a Microsoft framework for web development. It's powerful, and it gets a lot done in little to no time. But, as any technology there's a big learning curve that comes with it. 
  • JavaScript with the likes of NodeJS. The defacto runtime environment for JavaScript on the server. Most people use it because: 1) You don't have to learn a new syntax 2) You could theoretically move people from the front-end to the back-end without too much trouble. 
  • Ruby with Ruby on Rails framework. Still used today, although it's been eaten by the popularity from Node. Still has a very mature base, and syntactically it hasn't changed over the years (A good tutorial from 2008 should work fine today!)
  • Java, and its MVC Spring framework. You don't get to see this very often. Java is dreaded by many people. But according to my research, all of this bias is pure nonsense. I haven't' seen a good claim, other than the slow days of the JVM. Java is king when it comes to processing vast amount of data (Especially with Hadoop) 
Edited by Jose_49
  • Like 2
  • Thanks 1
  • 0
6 minutes ago, Jose_49 said:

That's a tough nut to crack. I was on the same boat, and on 2016 I decided to do something about it. Today, at least I'm a little bit aware of what's going on (There's a lot going on).

  

This is how I get up to date: 

  • InfoQ https://infoq.com 
  • Google Chrome's Developer Channel https://www.youtube.com/user/ChromeDevelopers
  • JSConf Channel: https://www.youtube.com/channel/UCzoVCacndDCfGDf41P-z0iA
  • Thoughtworks Radar: https://www.thoughtworks.com/radar
  • Smashing Magazine https://www.smashingmagazine.com 

I also use feedly (Configured for tech, web development, SEO), and read it once a day:

https://feedly.com

 

What's up with the web today (Not listed in order of importance): 

 

I'm going to throw super technical terms, just so you go and Google them. There's a lot to learn:

  • GPDR (https://www.eugdpr.org) - Super Important, even if you're not from Europe. 
  • HTTP/2 - HTTPS is not required for the standard. But the browsers are requiring it. Therefore it won't work on traditional HTTP. There's a service called Let's Encrypt that gives it for free (Needs renewal each 90 days). There's an app called certbot. HTTP/2 allows for something called multiplexing, and server push. 
  • Bundlers - Webpack
  • HTML 5.1
  • SPA (Single Page Applications) with libraries such as React; frameworks such as Vue, Angular, Aurelia. 
  • PWA (Progressive Web Applications) - https://developers.google.com/web/progressive-web-apps/
    • Basically it's:  
    • App Shell Architecture (Only load what the user needs to see in the first "paint"). Google more about First Meaningful Paint, and TTI (Time To Interaction) 
    • Works offline with a technology called Service Workers. 
    • Notifications.  
    • Installable on Android devices. 
  • Google Pagespeed, SEO, and how Google will start penalizing sites that have a low FCP, aren't mobile friendly, and aren't using HTTPS. 
  • Machine Learning, which includes the overhyped Deep Learning (This is just starting to pick up). I've learned that it's overrated, and it's not a silver bullet. You are going to see the likes of Tensorflow, Keras, Gluon more common. There are courses in Coursera, and there's a paper from Gray Marcus that is worth reading. Check Reddit's Machine Learning community for more info. 
  • ECMAScript 2015+ (Previously known as ES6). This is JavaScript's standard. It started to come out annually. People use Babel as a mechanism.
  • JavaScript streams + Server Side Rendering. (To boast super high efficient web apps). 
  • TypeScript
  • Web Assembly (WASM)
  • Container, and Container Orchestration Systems: Docker, Kuberentes (Respectively). 
  • Serverless Applications and services such as Amazon Lambda, Firebase, DynamoDB. Azure Functions. 
  • Puppet, Ansible, Chef for spinning up servers on the premises. 
  • Continuous Integration, Continuous Delivery, Continuous Deployment (Look for the differences, generally the Qones in last contain an additional step than the previous one didn't include).
  • The dreaded and loosely understood "Microservices" architecture
  • CSS Grids. Post-CSS, Auto-Prefixer, CSS Preprocessors such as SCSS (Sass).  
  • Web Components standard (It hasn't picked up. People prefer using libraries such as React, and frameworks such as Angular)  
  • WebXR, also known as Web Mixed Reality: Web AR + WebVR (Web Augmented Reality + Web Virtual Reality) 

There's probably a couple of things that I'm missing. Those are the ones that are coming to mind right now.

I just kind of stumbled upon this thread, but thank you for the time put into this post! I'm a hobbyist web dev who deals mostly with Python/Django and Wordpress and this is extremely useful for those who used to know how to make websites back when HTML4 came out.

  • 0

HTTP2 is taken care of by the server. Likewise, HTTPS is a server side configuration.

 

HTML and CSS have been replaced with react and angular2 frameworks, and there's an entire software stack dedicated to compiling your client code into JS. This code gets downloaded and talks to the backend via an API. Front and back end are separate. There's a whole lot to learn if you're coming from a late 90's knowledgebase. Good luck!

  • 0
2 minutes ago, satukoro said:

I just kind of stumbled upon this thread, but thank you for the time put into this post! I'm a hobbyist web dev who deals mostly with Python/Django and Wordpress and this is extremely useful for those who used to know how to make websites back when HTML4 came out.

Absolutely!

You have a nice lead when it comes to Python. Python is getting a lot of attention, due to being a powerful programming language for Data Science. The libraries such as Numpy and Pandas are implemented in C++, exposed with a Python API. Knowing how to handle Arrays, splices, and so on can give you a higher and better understanding when using the libraries I mentioned (Gluon, Keras, Tensorflow)

3 minutes ago, greenwizard88 said:

HTTP2 is taken care of by the server. Likewise, HTTPS is a server side configuration.

 

HTML and CSS have been replaced with react and angular2 frameworks, and there's an entire software stack dedicated to compiling your client code into JS. This code gets downloaded and talks to the backend via an API. Front and back end are separate. There's a whole lot to learn if you're coming from a late 90's knowledgebase. Good luck!

Technically speaking HTML and CSS are still used. Angular and React are built upon HTML and CSS, and you still use HTML and CSS to build with them. 

 

I personally try to avoid a library or a framework unless they're completely necessary. They introduce too much overhead (Longer page loads) if the application is too simple. Each 50 ms you add to page load has a higher potential of a user bouncing off the site before seeing it.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • BrowserOS 0.46.0 by Razvan Serea BrowserOS is a free, open-source Chromium-based browser that runs AI agents natively, offering a smarter, more productive browsing experience. It supports Chrome extensions and integrates AI agents to automate tasks, fill forms, and streamline workflows. Your data stays on your computer: you can use your own API keys or run local models via Ollama, making it a privacy-first alternative to tools like Perplexity, Comet, or Dia. With built-in productivity tools and app integrations, BrowserOS boosts efficiency while keeping control firmly in your hands. Being Chromium-based, BrowserOS lets you effortlessly import your bookmarks, passwords, and Chrome extensions in just a few clicks. BrowserOS works with OpenAI GPT models, Anthropic Claude, Google Gemini, and local AI models via Ollama or LMStudio. You can use your own API keys and effortlessly switch between providers. BrowserOS Agent Your AI productivity assistant that organizes and manages your browsing effortlessly Quickly list, group, or close tabs Save and resume browsing sessions Search your history and organize bookmarks Switch instantly to the tab you need BrowserOS Navigator – Automate web tasks with ease Navigate websites and search automatically Interact with pages without manual effort Handle repetitive tasks in seconds What makes BrowserOS special Feels like home - same familiar interface as Google Chrome, works with all your extensions AI agents that run on YOUR browser, not in the cloud Privacy first - bring your own keys or use local models with Ollama. Your browsing history stays on your computer Open source and community driven - see exactly what's happening under the hood MCP store to one-click install popular MCPs and use them directly in the browser bar (coming soon) Built-in AI ad blocker that works across more scenarios! BrowserOS 0.46.0 changelog: Run Claude Code & Codex right in your browser — We've extended the agent harness to bring full coding agents into BrowserOS. Claude Code and Codex now come bundled and plug straight into the assistant, so you can drive your browser with the agent — and the subscription — you already use. A brand new experience — A redesigned new tab, a calmer composer, and a rebuilt command center for switching between agents. The whole assistant is cleaner, faster to reach, and easier to live in. New MCP tools — We rebuilt the browser tool surface from the ground up — a tighter, more reliable set of tools for agents to drive the browser. Plus one-click install of BrowserOS as an MCP server into the agents you already run, with automatic URL sync. Chromium 148 — Updated to the latest Chromium base with all recent upstream fixes and security patches. Streamlined — We've pulled back a few features that weren't getting much use — Skills, Soul, and Memory — so we can focus and ship better versions of them soon. Download: BrowserOS 0.46.0 | 181.0 MB (Open Source) Download: BrowserOS for macOS | 485.0 MB Links: BrowserOS Homepage | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key legacy component by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. So far the company has acknowledged two known issues that have popped up after the release which include bugged-out Office apps as well as the Recycle Bin; though there could be more at play too. Speaking of bugs and issues, Microsoft seems to have finally acknowledged a problem that probably has been around for close to a year. That's because back in July of 2025 the company made a default change to the latest Windows 11 versions, wherein it switched to JScript9Legacy on Windows 11 24H2 and later releases. Hence following the release of version 25H2 in October 2025, JScript9Legacy also remained default-enabled. As a result there has been a compatibility issue ever since then. For those wondering, by switching to JScript9Legacy Microsoft intended to improve the security of modern Windows PCs by reducing vulnerabilities tied to legacy scripting like cross-site scripting (XSS), among others. XSS exploits can allow cyber-attackers to attach malicious code onto legitimate websites and use them to execute the code when a potential victim loads such a website. Hence the new JScript9Legacy engine enforced stricter execution policies and improved object handling, which should help mitigate such attacks. Microsoft today has published a new support article detailing the problem. Neowin spotted it while browsing. The company says that JScript global definitions and execution context may fail to persist across scripts, potentially breaking older dependent apps and web-based components that relied on this legacy behavior. In the article Microsoft has confirmed that the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll. As mentioned above, while the newer engine was designed to address vulnerabilities and strengthen security it also changes how JScript handles execution context. As a result functions and definitions loaded by one script could no longer remain available to subsequent scripts once execution ended. The company notes that some applications worked correctly on earlier Windows versions because the older JScript engine automatically retained global definitions and execution state between scripts. Under the newer model though that behavior is disabled by default causing certain legacy workloads and polyfill-dependent scripts to fail. Microsoft says it addressed the problem via the KB5077241 update though the fix had not been enabled automatically in the following updates. As such admins must explicitly turn on persistent JScript execution context using a Registry setting that the tech giant shared today. The configuration can be applied to individual processes or system-wide through the FEATURE_ENABLE_PERSISTENCE registry key. The steps have been outlined below: Run the following command to create the feature control registry key: reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PERSISTENCE" Under this key, create a new DWORD (32-bit) value. Configure the value as follows: To enable persistence for specific processes only: Set the value to 1 for each target process name. To enable persistence for all processes: Add * as the key name and set its value to 1. You can find the official support article here on Microsoft's website.
    • The possibility that milk gathers back into a glass implies that gravity can be 'reversed'.
    • VidCoder 12.20 by Razvan Serea  VidCoder is a DVD/Blu-ray ripping and video transcoding application for Windows. It uses HandBrake as its encoding engine. Calling directly into the HandBrake library gives it a more rich UI than the official HandBrake Windows GUI. VidCoder can rip DVDs but does not defeat the CSS encryption found in most commercial DVDs. You’ll need the NET 8 Desktop Runtime. If you don’t have it, VidCoder will prompt you to download and install it. The Portable version is self-contained and does not require any .NET Runtime to be installed. You do not need to install HandBrake for VidCoder to work. Feature list: Multi-threaded MP4, MKV containers Completely integrated encoding pipeline: everything is in one process and no huge intermediate temporary files H.264, H.265, MPEG-4, MPEG-2, VP8, Theora video Hardware-accelerated encoding with AMD VCE, Nvidia NVENC and Intel QuickSync AAC, MP3, Vorbis, AC3, FLAC audio encoding and AAC/AC3/MP3/DTS/DTS-HD passthrough Target bitrate, size or quality for video 2-pass encoding Decomb, detelecine, deinterlace, rotate, reflect, chroma smooth, colorspace filters Powerful batch encoding with simultaneous encodes Customizable Pickers to automatically pick audio and subtitle tracks, destination, titles and more Instant source previews Creates small encoded preview clips Pause, resume encoding VidCoder 12.20 changes: Updated HandBrake core to 1.11.2. Download: VidCoder 12.20 | 47.0 MB (Open Source) Download: Portable VidCoder 12.19 | 89.3 MB Link: VidCoder Home Page | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      590
    2. 2
      +Edouard
      185
    3. 3
      PsYcHoKiLLa
      76
    4. 4
      Michael Scrip
      73
    5. 5
      Steven P.
      66
  • Tell a friend

    Love Neowin? Tell a friend!