URL http and https have a big difference in security

What is the difference between https and http?

HTTP (Hyper Text Transfer Protocol) is a hypertext transfer protocol used to transfer information between a web browser and a server. The http protocol sends content in plain text, it does not provide data encryption in any way, and it is easy to transmit data during transmission. Attackers intercept, intercept, and tamper with, while confidential information filled in by users (such as account login information, passwords, and transaction records) can be easily stolen by hackers, and private information is very insecure.

HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer) is a secure socket layer hypertext transfer protocol. For the security of data transmission, https adds SSL protocol on the basis of http, which can make data encrypted transmission, which is equivalent to an upgraded version of http , More secure than the http protocol.

The https protocol needs to apply for an SSL certificate from the certificate authority CA, while http does not need to apply for an SSL certificate.

If you visit an http website, your data can be easily stolen by a third party, and you are also vulnerable to attacks from phishing websites, especially websites that require transactions, and funds can easily be transferred to hackers.

The https website deploys an SSL certificate. In addition to being able to encrypt, it can also prove to users the true identity of the website, so that users can effectively distinguish phishing websites from official websites and avoid hacker attacks.

In order to create a good network environment and protect user privacy and financial security, mainstream browsers such as Google mark all http websites as "insecure" to encourage all websites to deploy SSL certificates to implement https encryption.

Guess you like

Origin blog.csdn.net/qq_43422918/article/details/113770099