I've met a number of "web developers" who were at a fairly fundamental level, incapable of architecting web applications due to not knowing how HTTP works. It'

I've met a number of "web developers" who were at a fairly fundamental level, incapable of architecting web applications due to not knowing how HTTP works. It's so important in any engineering to understand what primitives you're working with and building on. With web development, everything is built on an HTTP-shaped pipe, and so anything that isn't in HTTP does not fit down that pipe. This becomes an important concern when dealing with security – any security measures not tied to HTTP in some way (a cookie, a header, etc) are just UI, and can be circumvented.