Does Siksha Sarovar have an AI chatbot to answer student doubts?

Yes. Siksha Sarovar has a built-in AI Assistant chatbot accessible from a floating button on every page. It understands English, Hindi and Hinglish, handles typos (for example 'pyhtion' or 'certifecate'), and indexes 165+ destinations including every course, lesson, BCA subject, school chapter, competitive exam topic, FAQ and tool. Most queries return direct link cards in under 5 milliseconds. An AI fallback is available for novel questions.

Can I ask the SikshaSarovar chatbot questions in Hindi or Hinglish?

Absolutely. The chatbot is built specifically for Indian students — natural Hinglish queries like 'kaise milega certificate', 'free hai kya', 'pyhtion ke datatype kaha hai', 'kaha se shuru karu' are first-class citizens. The matcher strips Hindi filler words and routes you to the right course, lesson or page.

Is the SikshaSarovar AI chatbot free to use?

Yes. The chatbot is 100% free, requires no signup, and is available on every page. It runs locally in your browser for the vast majority of queries — there is no API cost or usage limit. The optional 'Ask AI' fallback for advanced coding questions uses the Pro AI Tutor.

Is Siksha Sarovar really free?

Yes. Every course, lesson, quiz, online compiler, and notes download is free to use without an account. We offer an optional Pro pass that unlocks longer AI tutor sessions, larger compiler quotas and priority support, but it is not required to learn from the platform. The educational content itself stays free.

Do I need to sign in to use the courses?

No. You can browse any course, read all lessons, run code in the compiler and take quizzes without signing in. Google Sign-In is purely optional and is used only to save your progress, quiz scores and certificate eligibility across devices. We never request access to Gmail, Drive, Calendar, Contacts, or any sensitive Google data.

Are the certificates from Siksha Sarovar recognised?

Our certificates are a record of completion that you can share on LinkedIn or attach to applications, but Siksha Sarovar is an independent platform — not a UGC-recognised university or board. We are upfront about that. The certificate is most useful as a verifiable signal that you have completed the curriculum, not as a substitute for a degree.

Which courses are best for BCA and MCA students?

Our University Curriculum section covers the YMCA BCA/MCA syllabus subject-by-subject — Data Structures, DBMS, Web Based Programming, Computer Networks, Operating Systems, Software Engineering, Data Warehousing and more. Each subject is broken down into the same units your university teaches, with previous year question papers where available.

Can I use Siksha Sarovar to prepare for SSC, UPSC, Banking or Railway exams?

Yes. The Competitive section has dedicated tracks for SSC (CGL, CHSL, MTS), UPSC, IBPS/SBI Banking, RRB Railways and defence exams (NDA, CDS, AFCAT). Topics include quantitative aptitude, reasoning, English grammar, general knowledge and current affairs, written specifically for the Indian exam pattern.

What languages does the online compiler support?

The Siksha Sarovar online compiler supports C, C++, Python, Java, PHP, JavaScript, C# and SQL. The compiler runs your code in a sandboxed environment using Judge0, returns the standard output and error stream, and supports stdin so you can test interactive programs. There is no installation — everything runs in your browser.

How is my personal data handled by Siksha Sarovar?

We follow data minimisation: we collect only what is needed (email, name, profile picture from Google sign-in, and your learning progress). Data is stored on Supabase with HTTPS in transit. We do not sell user data, and we do not use it to train AI models. You can request deletion at any time by emailing contact@sikshasarovar.com — see our Privacy Policy for the full details.

Who founded Siksha Sarovar?

Siksha Sarovar was founded by Rohit Kumar, who serves as CEO and Head Developer. Rohit built the platform to provide free, structured education to students across India — covering programming courses, university notes, school study material and competitive exam preparation.

Web Security Basics: HTTPS and SSL — Web Technologies Notes

Web Security Basics: HTTPS and SSL

Why Web Security Matters

Web security protects data in transit, prevents attacks, and builds user trust. A single vulnerability can expose user credentials, payment information, or business data.

HTTP vs HTTPS

Feature	HTTP	HTTPS
Port	80	443
Encryption	None	TLS/SSL
Data integrity	Not guaranteed	Verified
Authentication	None	Server verified by CA
SEO	Ranked lower	Ranked higher
Browser indicator	"Not Secure"	🔒 padlock

SSL/TLS Explained

SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are cryptographic protocols that provide secure communication over the Internet.

TLS Handshake Process

Client (Browser)                    Server
     │                                │
     │──── ClientHello (TLS version, cipher list) ──────────►│
     │◄─── ServerHello (chosen cipher, certificate) ──────────│
     │     Verify certificate with CA                         │
     │──── Key exchange ──────────────────────────────────────►│
     │◄─── Finished ──────────────────────────────────────────│
     │                                                         │
     │◄═══════ Encrypted communication begins ════════════════►│

SSL Certificates

An SSL certificate binds a domain name to an organization's public key.

Types of SSL Certificates

Type	Validation	Use Case
DV (Domain Validation)	Domain ownership only	Personal/basic sites
OV (Organization Validation)	Domain + organization	Business sites
EV (Extended Validation)	Full legal verification	Banks, e-commerce
Wildcard	*.example.com	Multiple subdomains
SAN/Multi-domain	Multiple domains	Enterprise

Getting a Free SSL Certificate

# Let's Encrypt (free, automated)
sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com

# Certificates auto-renew every 90 days
sudo certbot renew --dry-run

Common Web Security Threats

Threat	Description	Prevention
XSS	Inject malicious scripts	Sanitize input, CSP headers
SQL Injection	Manipulate database queries	Parameterized queries
CSRF	Force authenticated actions	CSRF tokens
MITM	Intercept traffic	HTTPS everywhere
Clickjacking	Overlay deceptive UI	X-Frame-Options header
Brute Force	Guess passwords	Rate limiting, CAPTCHA

HTTP Security Headers

# Apache .htaccess
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "DENY"
Header always set X-XSS-Protection "1; mode=block"
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Header always set Content-Security-Policy "default-src 'self'"

HTTPS Best Practices

Redirect HTTP → HTTPS for all requests
Use HSTS (HTTP Strict Transport Security)
Keep SSL certificates up to date
Use TLS 1.2 or 1.3 (disable older versions)
Implement OCSP Stapling for faster certificate validation
Use strong cipher suites
Set secure and HttpOnly flags on cookies

<!-- Set secure cookie in HTML response -->
Set-Cookie: session=abc123; Secure; HttpOnly; SameSite=Strict

Key Takeaway: HTTPS with TLS encrypts data in transit and verifies server identity. Use free Let's Encrypt certificates, enforce HTTPS redirects, set security headers, and sanitize all user input to build secure web applications.