It
is often seen users getting confused over https and http protocols as they are
not aware of the exact difference between them. Before discussing the grounds
on which we prefer to use https over http in the online market, firstly we will
understand the working of web browsers through the below given image.
At
first, we will understand the concept of http and https.
What is HTTP
and how it Works?
The
full form of HTTP is Hypertext Transfer Protocol and it is used by web browsers
to specify how content or web pages are formatted and carried to the end users.
Whenever any user type any address or site URL in the web browser then whosoever
browser you are using turns the client and the machine acts as web server. So,
HTTP protocol comes in use whenever client sends a request to web server to
obtain certain information. Once the web server receives the request from the
client end then it reverts back with a web page so whenever users type a web
address in the browser and hits enter they get a web page in return.
What is
HTTPS and how it Works?
HTTPs
stands for Hypertext Transfer Protocol Secure, it is basically an amalgamation
of 2 entirely distinct protocols. First one is HTTP and second is SSL (Secure
Sockets Layer) protocol, the request sent through this protocol is very secured
and connection between client and web server is made in encrypted way so that
nobody could actually understand the kind of information shared among the two.
This HTTPS protocol is used where high level of security is required or which
includes the personal information of the users. Such sectors which need this
kind of protocol are banking websites, online shopping portals. Payment
gateways as well as browser email clients.
Difference
between HTTP & HTTPS and Why HTTPS used Over HTTP Protocol?
Now
we will discuss the core different between http:// and https:// protocols and
the most prominent query of the users that why Https is used over Http
protocol?
Usually
the website opened via HTTP protocol is considered less secured because it is
navigated through regular language. So there are higher probabilities that when
you are taking towards the website or page you have requested, someone hacks
your machine in between and get the information entered by you in your web
browser. If anything like this happens then the hackers can misuse your
personal details and you can end up stuck in a mess.
But
if you are using https protocols then the connection made between web servers
and clients are in encrypted mode and in between no one can understand the
information shared between the two.
So
to run your website on https protocol you need to obtain a SSL certificate that
contains public key (required while establishing connection with web server)
that makes HTTPS websites run on transport layer. Once you get the certification
then next time while navigating to a website having HTTPS protocol, the browser
connects with web server first asks for SSL certificate which has public key
and other required data and then they contact to CS (Certificate Authorities)
to confirm whether the certificate is valid or not and once they get a green
flag from the CAs then they take the clients to the requested web address.
This
is how the overall working takes place when you are using HTTPs and these are
the main reasons why HTTPs is generally considered as safer in comparison to
HTTP protocol and mostly online shopping sites and internet banking sites uses
HTTPs protocol.
Nice, actually you have written it in a manner that anyone can understand that. Thumbs up
ReplyDeleteThank you so much Nitin..!!! I am glad you understood the concept of https and http!!! keep posting your feedback :)
ReplyDelete