http vs https - Know Everything About Secure vs Non Secure Connection

Hypertext Transfer Protocol (http) is a standard universal set of rules for sending and receiving content between client and server across the Internet network. We use Http to access html pages, video, images and any other resources. There are situation to access/upload the confidential information from a server, which require secured connection between client and server in order to prevent avoid data leak from unauthorized party.

Netscape corporation comes with a solution to allow secured transaction via https connections. The basic protocol for http is same as that of https mostly while the differences in method occurs such as browser  http  request uses default port 80 for setting connection with server while https request uses  443 port for connection. https request uses encrypted layer/method for transferring and receiving information, so that information cannot be accessed by anyone else except client and server.

Two types of encryption layers are used for composing https requests.

1)Transport Layer Security (TLS) and,

2)Secure Sockets Layer (SSL)

Basic flow start with server response while client establish https connection. Server offers a menu of supported encryption methods. Client select one of this method to set up connection. Then client and server exchange third party verified certificate to prove their identities and unique key to start the encrypted  information flow and close the connection.

Example of certificates and https connection shown in the snap below,

When transferring sensitive information on internet, click at lock icon to the left of the site’s URL in the address bar to check the SSL info. SSL is a protocol that provides an encrypted tunnel between client and the website server to prevent third parties from disrupting the information traveling through the tunnel.

We use https in many places that involves user login/password protected web pages, mail account, payment gateways in ecommerce websites, social platform, banking, user filled forms and other applications that need security.  Please give your feedback, how you like the post?

Thanks

Yours Omenao