PKI Tutorials - Herong's Tutorial Examples - Version 2.10, by Dr. Herong Yang
What Is HTTPS (Hypertext Transfer Protocol Secure)?
This section describes what is HTTPS (Hypertext Transfer Protocol Secure) - A communication protocol that uses the HTTP and the SSL/TLS protocols to provide encrypted communication and secure identification of a Web server.
What Is HTTPS (Hypertext Transfer Protocol Secure)? HTTPS is a communication protocol that uses the HTTP (Hypertext Transfer Protocol) and the SSL/TLS (Secure Sockets Layer/Transport Layer Security) protocols to provide encrypted communication and secure identification of a Web server.
HTTPS has two important security related elements:
When you visit a Web site and you see the Web address starting with "https://...", you know that the Web site uses HTTPS. If you trust your browser and trust the CA, you can trust the HTTPS communication and exchange private information with the Web site without any security concerns.
For example, if you visit Paypal Web site, you will see the Web address displayed as "https://www.paypal.com/":
Here are RFC (Request For Comments) documents on HTTPS, HTTP and SSL/TLS: RFC 2818 - HTTP Over TLS, RFC 2616 - Hypertext Transfer Protocol -- HTTP/1.1", RFC 5246 - The Transport Layer Security (TLS) Protocol - Version 1.2".
Last update: 2011.
Table of Contents