Talk about HTTP and HTTPS

Today, simply say http and HTTPS,

In simple terms:

• HTTP is a hypertext protocol, and the TCP port is
• HTTPS is an encrypted HTTP protocol with the SSL protocol, and the TCP port is 443.

What is HTTP

The HTTP (Hypertext Transfer Protocol) protocol is a very common network protocol that is designed to transmit web content, provides methods for publishing and receiving HTML, and most Web sites are transmitting Web pages via the HTTP protocol (HTML, CSS, JS, etc.)

What is SSL/TLS

SSL (secure Sockets layer Secure socket), and its successor Transport Layer Security (Transport layer Security,tls) is a security protocol that provides security and data integrity for network traffic. TLS encrypts the network connection with SSL at the transport layer. The current version is 3.0. It has been widely used for authentication and encrypted data transfer between Web browsers and servers.

The SSL protocol can be divided into two tiers:

SSL recording Protocol (SSL record Protocol): It is based on a reliable transport protocol (such as TCP) to provide high-level protocol data encapsulation, compression, encryption and other basic functions of support.

SSL Handshake Protocol (SSL handshake Protocol): It is based on the SSL logging Protocol, which is used to authenticate, negotiate encryption algorithms, exchange encryption keys, etc., before the actual data transfer begins, as shown in: SSL protocol is located in tcp/ The IP protocol and various application layer protocols provide security support for data communication.

The SSL protocol provides a secure channel with the following three features:

Confidentiality: The SSL protocol encrypts the communication data using the key.

Reliability: Both the server and the customer are certified and the customer's certification is optional.

Integrity: The SSL protocol will check the integrity of the transmitted data.

What is HTTPS

Now to understand the HTTPS (hypertext Transfer Protocol Secure) Secure Hypertext Transfer Protocol, it should be simple and clear, HTTPS is the security version of HTTP, that is, the SSL layer under HTTP is added

The difference between HTTP and https:

First, the HTTPS protocol requires a certificate to the CA, the general free certificate is very small and requires a fee.

Second, HTTP is a Hypertext Transfer Protocol, the information is plaintext transmission, HTTPS is a secure SSL encryption Transfer protocol.

Third, HTTP and HTTPS use a completely different way of connection, with the same port, the former is 80, the latter is 443.

Four, HTTP connection is very simple, is stateless; The HTTPS protocol is a network protocol built by the SSL+HTTP protocol to encrypt the transmission and authentication, which is more secure than the HTTP protocol.

Talk about HTTP and HTTPS