Home → Web Technology → Unit V

Publishing & Security

Get your site online safely and efficiently

Web Publishing

  • Choose hosting: shared, VPS, dedicated, cloud, static, serverless.
  • Upload via SFTP/FTPS or CI/CD pipelines (GitHub Actions, etc.).
  • Use CDN for static assets; enable HTTPS with TLS certificates (Let's Encrypt).

Domains & DNS

  • Register a domain; configure DNS records: A/AAAA, CNAME, MX, TXT.
  • Point A record to server IP; use CNAME for subdomains.
  • Propagate changes (can take minutes to hours).

Performance

  • Core Web Vitals: LCP, INP, CLS. Optimize images, critical CSS, and JS.
  • Minify & compress (gzip/br); code split and defer non-critical JS.
  • Use HTTP/2/3, caching headers, and lazy-loading (loading="lazy").
  • Measure with Lighthouse/DevTools; monitor in production (RUM).

SEO Basics

  • Titles/descriptions per page; semantic headings and internal links.
  • XML sitemap and robots.txt; canonical links to avoid duplicates.
  • Mobile-friendly, fast, and accessible content.
<head>
  <title>CSE Study Portal — Web Tech</title>
  <meta name="description" content="Syllabus, notes and questions.">
  <link rel="canonical" href="https://example.com/web/">
</head>

Accessibility

Follow WCAG: perceivable, operable, understandable, robust (POUR).

  • Keyboard navigation, visible focus, sufficient contrast.
  • Alt text for images; labels for inputs; ARIA only when needed.
  • Test with screen reader (NVDA/VoiceOver) and keyboard only.

Security Essentials

  • Always use HTTPS and HSTS; set secure cookies.
  • Mitigate XSS with output encoding and CSP; protect CSRF with tokens and SameSite cookies.
  • Set security headers: CSP, X-Content-Type-Options, X-Frame-Options/Frame-Options, Referrer-Policy.
  • Validate on server; sanitize user input; use parameterized queries.

Deployment Checklist

  • No console errors; pages pass HTML/CSS validation.
  • Minified assets; cache headers set; images optimized.
  • 404/500 pages present; sitemap and robots configured.
  • Backups enabled; environment variables secured.

Monitoring & Analytics

  • Enable analytics (privacy-respecting if possible).
  • Set up uptime/error monitoring and logs.
  • Track performance metrics in production (RUM).