Talking about the difference between http and https

HTTP and HTTPS is the protocol type of access needed resources.

HTTP stands for Hyper Text Transfer Protocol, Chinese name is called Hypertext Transfer Protocol. HTTP protocol is used for hypertext data from the network to the local browser transport protocols that can ensure efficient and accurate transfer hypertext documents. HTTPS stands for Hyper Text Transfer Protocol over Secure Socker Layer, is a security target HTTP channel, simply for HTTPS is the secure version of HTTP, adding SSL layer under HTTP, referred to as HTTPS. HTTPS SSL security infrastructure is, therefore by its contents are transmitted through SSL encryption, its main role can be divided into two types: the establishment of an information security channel to ensure the security of data transmission; confirm the authenticity of the site, any use of the HTTPS site, you can view information after the site is really certified by clicking on the lock symbol in the browser address bar can also be queried via a secure signature CA authority.

Here we always say SSL, then SSL is what stuff it, SSL is a kind of security protocol. Our data transmission is very easy to steal unauthorized users on the network, SSL encryption method to establish a communication channel between the two parties to ensure the confidentiality of the data transmission. The so-called encrypted channel refers to the sender before sending data, using an encryption algorithm and encryption key to encrypt data, and then transmits the data to each other. After the receiver receives the data using the decryption algorithm and a decryption key acquisition plaintext from the ciphertext. Third party without the decryption key, you can not restore the ciphertext plaintext, so as to ensure the confidentiality of data transmission.

Note: Although some sites that use HTTPS protocol, but they will be prompted to unsafe browsers, such as 12306 in Chrom we open inside the browser, the link is: https: //www.12306.cn/, then the browser will Tip "your link is not private links" in this case, because the CA certificate 12306 is the Chinese Ministry of Railways self-signed, and this certificate is not trusted CA mechanism, so here certificate validation would not have passed and prompt so but in fact it is still the transfer of data through SSL encryption.

 

Guess you like

Origin www.cnblogs.com/yangzepeng/p/10957064.html