I find myself rather lacking in web security skills. I have a basic understanding of what TLS/certs/CAs/... are, gotten mainly from Wikipedia and blog articles but I often don't know how to make it all work together. What do you think is the best comprehensive online (free) resource to learn the ropes?
There's a fairly comprehensive list here:<p><a href="https://github.com/sbilly/awesome-security" rel="nofollow">https://github.com/sbilly/awesome-security</a>