http called Hypertext Transfer Protocol, using TCP port 80, the default data is transmitted in clear text, data can be captured by the capture tool, so the interner, http server and some of the more important sites require the use of PKI (Public Key Infrastructure structure) technology to encrypt the data! This is a https;
Hypertext transfer protocol called https secure, uses TCP port 443, his data will be encrypted with the public key PKI, this packet capture tools to capture packets that there is no way to see the contents of the package, security is greatly improved, to decrypt the data, then you should use the PKI private key. So some of the high security sites such as: online banking, e-commerce sites need to use https access!
the difference between http and https
- The HTTP URL with http: // at the beginning, and the HTTPS URL with https: // at the beginning
- HTTP is not secure, safe and HTTPS
- HTTP is the standard port 80, while the standard HTTPS port 443
- In the OSI network model, HTTP works at the application layer and the transport layer work HTTPS
- HTTP can not be encrypted, and HTTPS encrypted data transmission
- HTTP do not need a certificate, and HTTPS require Vorthong and other CA issued SSL certificate
When you log in to form a web site, fill in the form and click "Submit", the information you enter may be intercepted *** unsafe website. This information may be detailed information on banking transactions, it may also be privacy you enter. *** In the eyes of this "blocking" often referred to as a "middleman ***." The actual *** may occur in a variety of ways, but the most common one is: *** Place a small listener was not detected on the server hosting the site. The program in the background, waiting until the visitors start typing the information on the site, and it will be activated to start capturing information and then send it to ***.
When you access using SSL-encrypted Web site, which is the site HTTPS protocol, the browser will establish friendly encrypted channel with the site to protect your privacy data is not leaked, no one can view or access your browser the contents of the input, to ensure secure data transmission.
The necessary conditions to build a https site is to apply for an SSL certificate, use of foreign investment needed to achieve https encryption protocol, you need to install the SSL certificate request.
The above article is published by SSL finishing shield small series, more knowledge [www.mtime.com]