http and https

[Romeo]

Hello,

What is the difference between http and https?

[kev woodman]

All traffic sent using HTTP is unencrypted plain text. HTTPS is encrypted HTTP. Problem is that encrypting and decrypting the bitstream takes time so HTTPS is an inherently less efficient way of transmitting data so unless you have a particular reason to use it you should stick with HTTP.

HTTPS (Hypertext transfer protocol secure(d)) uses Secure Socket Layer (SSL) or Transport Layer Security (TLS because you remember your OSI Layer Model right?) to encrypt the data flow but requires that the server has a public key certificate.

[Harry]

Romeo,
Recently we had a good discussion on the related topic at :
HTTP, Hypertext Transfer Protocol

please don’t ….. otherwise Moderator will get

[WHUKAdmin]

Harry,
I don't see any relation between these two threads. The thread you have mentioned is talking about the loading time/ performance. And the topic posted by Romio is about the difference between HTTP and HTTPS.

[And to let you know, it is the job of moderator to manage the forum. There is nothing to do about madness and stuff like that. But some people just don't understand the rules OR intentionally don't like to follow the rules. Nothing can be done about those people, except they get banned or their post get deleted... Take a note of this in future.]

[kev woodman]

There is some relevance in the other post - one of the differences between HTTP and HTTPS is performance.

[Alex]

I don't think Romeo is seeking that difference...

You can say that there is a differences in characters too... HTTP[S] Not major though, but there is a difference.

[Callum]

HTTPS is more secured than HTTP as it is used for security sensitive information like online payment transactions and corporate logons. Many banks websites are under HTTPS for security reasons but many people are unaware that the details of a credit card when encrypted to the web server only protects the information when in transit between the user’s computer and the server. There is no guarantee about the security of the server even if the site is secured with HTTPS.

[seo4ssl]

If you want to change your entire website to HTTPS (SSL) secured. For things such as shopping carts and private information such as credit card numbers. This will secure your site to HTTPS on all the pages.

Add this to .htaccess

PHP Code:
RewriteEngine On
RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
That's it! your done, your website will now show a lock on it.
__________________

[stuart4487]

Hi..

HTTP is Hyper Text Transport Protocol and is transmitted over the wire via PORT 80(TCP). You normally use HTTP when you are browsing the web, its not secure, so someone can eavesdrop on the conversation between your computer and the web server.

HTTPS (Hypertext Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a Web protocol developed by Netscape and built into its browser that encrypts and decrypts user page requests as well as the pages that are returned by the Web server. HTTPS is really just the use of Netscape's Secure Socket Layer (SSL) as a sublayer under its regular HTTP application layering. (HTTPS uses port 443 instead of HTTP port 80 in its interactions with the lower layer, TCP/IP.) SSL uses a 40-bit key size for the RC4 stream encryption algorithm,new-age browsers use 128-bit key size which is more secure than the former, it is considered an adequate degree of encryption for commercial exchange.HTTPS is normally used in login pages, shopping/commercial sites.

Although it may be encrypted does not mean its safe, there are tools out there to decrypt the information being sent over the wire, although its more difficult to do so.

[davidowall]

I think it has already been said really. HTTPS is more secure and uses SSL to encrypt sensitive data flow. This is usually seen amongst banks and some major retailers.

The more standard HTTP is common place everywhere and the data sent here is unencrypted text data.

HTTPS will inevitably take longer in performance, loading and operational times due to this added level of encryption and although this is by no means a 100% guarantee it is definitely more secure than the unprotected HTTP.

[himansu]

HTTP means hypertext transfer protocol and HTTPS means hypertext transfer protocol secure

[Edwards]

Thank you for share a good information... The difference is described very well..