http adds security authentication equal to https. http is an application layer communication protocol between the client browser or other program and the web server. https is an http channel aimed at security, which means it is a secure version of http.
Before exploring HTTP and HTTPS in detail, let’s first clarify the basic concepts:
HTTP is client-side browsing An application layer communication protocol between a server or other program and a Web server. All hypertext information is stored on Web servers on the Internet, and clients need to transmit the hypertext information they want to access through the HTTP protocol.
HTTPS (full name: Hyper Text Transfer Protocol over Secure Socket Layer) is an HTTP channel aimed at security. Simply put, it is a secure version of HTTP.
Although HTTP already has quite excellent aspects, it still has shortcomings. The communication content is in clear text, that is, it is not encrypted, and the content may be eavesdropped.
Eavesdropping may occur in all aspects of Internet communications.
In view of the shortcomings of HTTP, HTTPS adds:
Communication encryption
Certificate authentication
Integrity Protection
Therefore, for HTTP, communication needs to be encrypted to prevent eavesdropping.
One encryption method is to encrypt communications.
HTTP has no encryption mechanism and needs to be combined with SSL (Secure Socket Layer) or TLS (Transport Layer Security) to encrypt communication. HTTP used with SSL is called HTTPS.
The other is to encrypt the specific content of the communication message.
Although we can encrypt the communication content, it only achieves the purpose of making it difficult for attackers to decipher the message, but the encrypted message itself can still be intercepted. Currently, there are many software for obtaining message information, such as Sniffer and Wireshark.
The above is the detailed content of What does http increase equal to https?. For more information, please follow other related articles on the PHP Chinese website!