HTTPS

HTTP and HTTPS

The request/response protocol behind the web, its core methods, and how TLS secures it as HTTPS.

Difference Between HTTP and HTTPS

HTTP (HyperText Transfer Protocol) transfers web data in plain text, while HTTPS is the same protocol running over a TLS-encrypted connection — so HTTPS adds e…

What is SSL/TLS?

SSL/TLS is a cryptographic protocol that encrypts data in transit between a client and server, verifies the server’s identity using certificates, and ensures t…

What is Public Key Infrastructure (PKI)?

Public Key Infrastructure (PKI) is the set of roles, policies, and systems needed to create, distribute, validate, and revoke digital certificates that bind a…

What are Digital Certificates?

A digital certificate is an electronic document, typically in X.509 format, that binds a public key to an identity (such as a domain name or organization) and…

HTTPS vs HTTP: What Security Does HTTPS Add?

HTTPS is HTTP layered on top of TLS, adding encryption, integrity, and server authentication that plain HTTP has none of — meaning HTTPS traffic cannot be read…

What is a Man-in-the-Middle Attack?

A man-in-the-middle (MITM) attack is when an attacker secretly positions itself between two communicating parties, intercepting, and potentially altering, traf…

What Are the Secure and HttpOnly Cookie Attributes?

The Secure attribute tells the browser to send a cookie only over HTTPS connections, and the HttpOnly attribute tells the browser to hide the cookie from JavaS…

What Is HTTPS and What Causes Mixed Content Errors?

HTTPS is HTTP layered over TLS, encrypting and authenticating traffic between browser and server, and mixed content occurs when a page loaded securely over HTT…

What Happens During a TLS Handshake?

A TLS handshake is the process by which a client and server agree on cryptographic parameters, verify the server’s identity via its certificate, and derive a s…