HTTP Protocol Learning Series (HTTPS communication process)

3.4.1 What is HTTPS

HTTPS (full name: Hypertext Transfer Protocol over secure Socket Layer) is a security-targeted HTTP channel and is simply a secure version of HTTP. That is, the SSL layer is added under HTTP, the security base of HTTPS is SSL, so the details of encryption see SSL.

See figure below:

The port number used for HTTPS is 443. implementation principle of 3.4.2 HTTPS

There are two basic types of encryption and decryption algorithms:

1) symmetric encryption : The key is only one, encryption and decryption for the same password, and the decryption speed is fast, the typical symmetric encryption algorithm has DES, AES and so on;

2) Asymmetric encryption : The key in pairs appear (and according to the public key can not infer the private key, according to the private key can not infer the public key), encryption and decryption using a different key (public key encryption requires private key decryption, private key encryption requires public key decryption), relatively symmetric encryption speed is slow, the typical asymmetric encryption algorithm has RSA, DSA and so on.

Let's take a look at the HTTPS communication process:

Advantages of HTTPS communication:

1) The client-generated key can be obtained only by the client and the server;

2) encrypted data can only be plaintext by client and server;

3) client-to-server communication is secure.