Thursday, September 27, 2007

A must know knowledge: Difference between http & https

A must know info for internet user specially for those people using the internet for financial transaction.

What is the main difference between http:// and https://

It's all about keeping you secure

HTTP stands for HyperText Transport Protocol,-Protocol (
You use a protocol to communicate information to another person (or computer). If you both follow different rules about how the information will be laid out, you won't be able to understand each other. The communications protocol will also dictate the actions that must be performed given the information received(between web servers and
clients).

The letter S makes the difference between HTTP and HTTPS.

The S stands for "Secure".

If you visit a website or webpage, and look at the address in the web browser, it will likely begin with the following: http://.

See sample site below(my blog),
note the encircled http:// which can be found in every unsecured sites.

Click image to enlarge.

This means that the website is talking to your browser using the regular 'unsecure' language.

In other words, it is possible for someone to "eavesdrop" or hack/intercept on your computer's conversation with the website.

If you fill out a form on the website, someone might see the information you send to that site.
This is why you never ever ever enter your credit card number in an
http website!

But if the web address begins with https://, that basically means your computer is talking to the website in a secure code that no one can eavesdrop on.

See my example secure site below:
i choose Equitable bank site because i use it frequently and it is very secured. It is secured by Verisign known for Encryption and SSL Certificates.
Note the encircled https:
//? This indicate the site is secured. Every transmission is encrypted and rigorously authenticated.
Click image to enlarge.

You understand why this is so important, right?

If a website ever asks you to enter your credit card information, you should automatically look to see if the web address begins with https://.

If it doesn't, there's no way you're going to enter sensitive information like a credit card number!


No comments:

Post a Comment