A good start. If you want to improve it, please add information about how to consume HTTPS services in a secure way.<p>Also potentially add an aside for self-signed&#x2F;enterprise CA, as most web developers will encounter internal systems sooner or later. This makes the above (consuming services) more challenging :-)