* "SSL" --> "https" * "authorization" --> "authentication" (e.g., "HTTP basic authentication" -- except when referring specifically to the HTTP "Authorization" header used to send it) * add a sidebar with more details on why it matters