Saturday, August 8, 2009

HTTPS Secure

HTTPS = Hypertext Transfer Protocol Secure it's a combination of the Hypertext Transfer Protocol and a cryptographic protocol.

Demo (for example):
https://security-shell.ws/

This is connections are often used for payment transactions.

Difference with HTTP? Well the difference is in the URL and in the port default:
HTTP URLs which begin with "http://forexample.com/"
HTTPs URLs which begin with "https://forexample.com/

HTTP use port 80 by default
HTTPS use port 403 by default

HTTP is insecure and subject to main-in-the-middle and eavesdropping attacks,
HTTPS can withstand these attacks and is secure.

HTTP operates at the highest layer of the OSI Model, but the security protocol operates at a lower sublayer; HTTPS is not a separate protocol, but refers to use of ordinary HTTP over an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) connection.

To create a web server to accept HTTPS connections, the administrator must create a public key certificate for the server desired.

The level of protection depends on the correctness of the implementation of the web browser and the server software and the actual cryptographic algorithms supported.

Enjoy, XyLeM

0 comments:

Post a Comment

Whrite a comment