Internet Computer smart contracts serve the web page, not just the data behind it

A different kind of smart contract

On most blockchains, the application a user clicks sits on a conventional web server. Only the transaction layer touches the chain. @dfinity's Internet Computer takes a different approach: the HTML, CSS, and JavaScript that make up a front end are stored inside a canister, the network's term for a smart contract. Because canister smart contracts can serve HTTP requests, users can access the blockchain directly through a standard web browser, allowing decentralized apps to be 100% on-chain.

On the Internet Computer Protocol, smart contracts are called canisters. Canisters are digital containers that hold both the code and the data needed to run a program. This lets computers connect and share information without needing a central server, such as those provided by AWS or Google Cloud.

How a browser request actually reaches the chain

The routing layer between a user's browser and a canister involves two distinct components. HTTP gateways translate standard HTTP requests from browsers and other clients into IC API calls and translate responses back into HTTP. Users access canisters via boundary nodes that translate requests from users and applications into canister calls handled by either the API node or the HTTP gateway.

An API boundary node receives the IC API call and forwards it to a replica on the subnet that hosts the target canister. The canister then executes the request, constructs an HTTP response including status, headers, and body, and returns it.

Critically, the routing infrastructure cannot alter what a canister stores. Generating a subnet certificate requires agreement from at least two thirds of the subnet's nodes using chain-key cryptography, so a certified response represents network-level consensus, not a single node's assertion. When the HTTP gateway receives a canister response that includes a certificate, it verifies the certificate before passing the response to the client. This means a single rogue node cannot quietly substitute a different page.

Sites can also be served over a raw domain that skips the signature check. The official ICP developer documentation warns that on that route, a single bad node can alter what the browser receives, making the standard certified domain the safer choice for most applications.

What sets the Internet Computer apart is its end-to-end decentralization combined with TCP/IP connectivity, allowing it to host software directly on the internet without intermediaries.

Sources:
ICP Developer Docs: Edge Infrastructure
CoinMarketCap Academy: What Is Internet Computer (ICP)?
Messari: Internet Computer Profile