Today, when I visited the Baidu search engine, I suddenly found that the URL changed from the original HTTP to HTTPS.
First, let's take a look at what is the difference between HTTPS and HTTP
HTTPS (full name: Hyper Text Transfer Protocol over Secure Socket Layer) is an HTTP channel with security as the goal, simply put, it is a secure version of HTTP. That is, the SSL layer is added under HTTP, and the security basis of HTTPS is SSL, so SSL is required for the details of encryption. It is a URI scheme (abstract identifier system) with a syntax similar to http:system. For secure HTTP data transfer. https:URL indicates that it uses HTTP, but HTTPS has a different default port than HTTP and an encryption/authentication layer (between HTTP and TCP). The system was originally developed by Netscape and is built into its browser, Netscape Navigator, which provides authentication and encrypted communication methods. It is now widely used for security-sensitive communications on the World Wide Web, such as transaction payments.
The difference between HTTPS and HTTP
The Hypertext Transfer Protocol HTTP protocol is used to pass information between web browsers and web server servers. If an attacker intercepts the transmission packet between the web browser and the website server, they can directly read the information in it, so the HTTP protocol is not suitable for transmitting some sensitive information, such as credit card numbers, passwords, etc.
To address this flaw in the HTTP protocol, another protocol needs to be used: HTTPS, the Hypertext Transfer Protocol for Secure Sockets Layer. For the security of data transmission, HTTPS adds the SSL protocol on the basis of HTTP, which relies on certificates to verify the identity of the server and encrypts the communication between the browser and the server.
The main differences between HTTPS and HTTP are as follows:
1. The HTTPS protocol needs to apply for a certificate from CA, which is generally very free and needs to be paid.
2. HTTP is a hypertext transmission protocol, information is transmitted in plaintext, and https is a secure SSL encryption transmission protocol.
3. HTTP and https use completely different connection methods, and the ports used are also different, the former is 80, the latter is 443.
4. The HTTP connection is very simple and stateless; HTTPS protocol is a network protocol built on SSL+HTTP protocol that can perform encrypted transmission and identity authentication, which is more secure than HTTP protocol.
For Baidu search engine to enable HTTPS, I am very in favor! At least the information security transmission of user searches has been greatly improved.
Also prevent third parties from intercepting data packets from it!
|
Posted on 1/25/2015 12:06:38 PM
|
|
|
|
