We need confidentiality when browsing the web, otherwise attacker may be to monitor our traffic and get access to your data during transmission. The HTTP web protocol has a secure version called HTTPS. In the context of web security, layering allows us to enhance the security of existing protocols, the HTTPS is added with security enhancement upon HTTP, it is the same protocol but the data on the transport layer (TPC/IP) is encrypted. HTTPS is an implementation of Transport Layer Security (TLS) encryption, TLS encryption can help protect web applications form data breaches and other attacks.

Secure connection with digital certificate

When you enter a URL that starts with https// in to your browser’s address bar and initiates a request, you are requesting a secure connection to a web server. In response to your request the remote web server sends back its public key to your browser. This public key is typically included in the form of a signed digital certificate, this certificate is then checked using the public key of the certificate authority (CA), these public keys of trusted CAs are often stored locally within the browser.


Back to parent page: Hypertext Transfer Protocol (HTTP)

Computer_networksNetwork_securityHTTPSHTTPINFO1112INFO2222TLS