What is the Difference Between Http and Https?

http is hyper text transfer protocol which isfrom eavesdroppers and (provided it is
responsible for transmitting and receivingimplemented properly and the top level
information across the Internet where as https iscertification authorities do their job properly)
secure http, which is used exchanging confidentialman-in-the-middle attacks.
information with a server, which needs to beThe default TCP port of an https: URL is 443 (for
secured in order to prevent unauthorized access.unsecured HTTP, the default is 80). To prepare a
HTTP is Hyper Text Transport Protocol and isweb-server for accepting https connections the
transmitted over the wire via PORT 80(TCP). Youadministrator must create a public key certificate
normally use HTTP when you are browsing thefor the web-server. These certificates can be
web, it's not secure, and so someone cancreated for Linux based servers with tools such
eavesdrop on the conversation between youras Open SSL's ssl or SuSE's gensslcert. This
computer and the web server. HTTP can supportcertificate must be signed by a certificate
the client asking for a particular file to be sentauthority of one form or another, who certifies
only if it has been updated after a certain datethat the certificate holder is who they say they
and time. This would be used if the client hasare. Web browsers are generally distributed with
already retrieved a copy of a file by that namethe signing certificates of major certificate
from that server, but wants to check to see if itauthorities, so that they can verify certificates
has been updated since then. The serversigned by them.
responds either with the updated file, with aMain Features
message to say the file has not been changed, orDedicated to HTTP protocol, show a wide range
with a message that the file no longer exists.of HTTP related information, request and
HTTPS (Hypertext Transfer Protocol over Secureresponse header, content, sent and received
Socket Layer or HTTP over SSL) is a Webcookies, stream, query strings, post form
protocol developed by Netscape and built into itsvalues…
browser that encrypts and decrypts user pageRequest builder, Users can handcraft an HTTP
requests as well as the pages that are returnedrequest by using the HTTP Request Builder, or
by the Web server. HTTPS is really just the usethey can use a drag-and-drop operation to move
of Netscape's Secure Socket Layer (SSL) as aan existing request from the session grid to the
sub layer under its regular HTTP applicationRequest Builder to execute it again.
layering. (HTTPS uses port 443 instead of HTTPHex Viewer allows users to view and edit binary
port 80 in its interactions with the lower layer,files in hexadecimal and textual format. New
TCP/IP.) SSL uses a 40-bit key size for the RC4Displays Winsock traffic originating from Java
stream encryption algorithm, new-age browsersapplets and JavaScript embedded in a Web page,
use 128-bit key size which is more secure thandisplays Winsock traffic originating from ActiveX
the former, it is considered an adequate degreecontrols and COM objects instanced by an
of encryption for commercial exchange. HTTPS isapplication (Stand-alone Edition Only)
normally used in login pages, shopping/commercial"Before request and after response" browser
sites.cache comparisons
How it WorkSupport HTTPS, show you unencrypted data sent
Https is not a separate protocol, but refers to theover HTTPS / SSL connections, HTTPS is
combination of a normal HTTP interaction over anavailable if the application uses the Microsoft
encrypted Secure Sockets Layer (SSL) orWININET API (ex. ie, outlook) or Mozilla NSS API.
Transport Layer Security (TLS) transport(ex.
mechanism. This ensures reasonable protection