The difference between HTTP and HTTPS

Objective

A few days ago was asked about the difference between HTTP and HTTPS, I found myself just on the surface know HTTPS than HTTP security, the principle of what is not clear, decided to check the information thoroughly understand their meaning and differences.

The Hypertext Protocol HTTP protocol is used to pass information between a Web browser and a Web server, the HTTP protocol sends content in plaintext, does not provide data encryption in any way, and if an attacker intercepts messages passed between the browser and the server, it can read the information directly, so HTTP is not suitable for transmitting some sensitive information. For example: credit card number, password payment and other information.

In order to resolve the HTTP protocol this flaw, need to use another protocol: Secure Sockets Layer Hypertext Transfer Protocol HTTPS, in order to secure the data transmission, HTTPS on the basis of HTTP added SSL protocol, SSL relies on certificates to verify the identity of the server, and encrypt the communication between the browser and the server.

The concept of HTTP and HTTPS

http: Hypertext Transfer Protocol, an extensive network protocol on the Internet, is a standard for user client and server request and Response (TCP), which transmits hypertext to the local browser from WWW servers, which can make the browser more efficient and reduce the network transmission.

HTTPS: A security-targeted HTTP channel that joins the SSL layer under HTTP. SSL relies on certificates to verify the identity of the server and to encrypt communication between the browser and the server.
The main functions of the HTTPS protocol can be divided into two types:

1. Recommend an information security channel to ensure the security of data transmission
2. Determine the authenticity of the site.

The difference between HTTP and HTTPS

The HTTPS protocol is a network protocol built by HTTP + SSL that can be encrypted for transmission and authentication, which is more secure than HTTP.
The main differences are as follows:

1. HTTPS protocol requires a certificate, the general free certificate is relatively small, so it requires a certain fee
2. HTTP is a Hypertext Transfer Protocol, and information is transmitted in plaintext. HTTPS is an SSL encrypted transport protocol with security
3. HTTP and HTTPS use a completely different type of connection, with a different port, HTTP is 80 port, HTTPS is 443 port

Therefore, the general security level of the service is to adopt the HTTPS protocol for information encryption to avoid the disclosure of sensitive information.

Advantages and Disadvantages of HTTPS

Advantages:

1. Security
2. SEO better than the same HTTP site, HTTPS encrypted sites in the search results will be higher.

Disadvantages:

1. HTTPS protocol can make load time longer, increase data overhead and power consumption.
2. Economic aspects

The difference between HTTP and HTTPS