Ask HN: Best online resources for learning web security

I find myself rather lacking in web security skills. I have a basic understanding of what TLS/certs/CAs/... are, gotten mainly from Wikipedia and blog articles but I often don't know how to make it all work together. What do you think is the best comprehensive online (free) resource to learn the ropes?