What is the difference between http:// and https://?

What is the difference between the two?

Thank you for help! :slightly_smiling_face:

8 Likes

Nice question Dave!

HTTPS stands for “Hyper Text Transfer Protocol with Secure Sockets Layer (SSL)”.
This also means secure, because your HTML traffic is encrypted between the Server (codecademy) and the Client (Your browser).
If it was not HTTPS, but HTTP, then an attacker (sitting in an internet coffee for example) could see all your traffic. This would include your login information and password. The attacker could also alter the data stream, meaning that he can change what you see on the internet. He could replace this comment with anything he chooses, and that’s what you’d see.

I hope this helps =)

6 Likes

Thank you for your quick and detailed answer!

3 Likes

Your welcome!:slightly_smiling_face:

3 Likes

Actually TLS is SSL’s successor and most sites now(including Codecademy) use TLS as it has stronger encryption algorithms

6 Likes

Really useful information!

5 Likes

The differences between the two protocols are very minor and technical, but they are different standards. TLS uses stronger encryption algorithms and has the ability to work on different ports. Additionally, TLS version 1.0 does not interoperate with SSL version 3.0.

4 Likes

Additionally (adding one more thing) most browsers will detect if SSL is used on a website and deem it weak encryption (I believe).

5 Likes

The two terms are often used interchangeably in the industry although SSL is still widely used .

6 Likes

Thanks @sgr524 for telling me about this!

4 Likes

Thank you for sharing.

5 Likes

Your welcome :slightly_smiling_face:

3 Likes

Hypertext Transfer Protocol Secure - Sites use SSL or TLS to secure data transfer. You can purchase SSL certificate when you purchase/register your domain somewhere like with name cheap or go daddy. Depending on the level of certificate you purchase will determine what type of verification you will need to go through to prove you are a legitimate and secure company/website. EV is the highest level of security certificate and will get you the green bar on your website. EV will also make your name public etc. as the owner(i.e. Facebook, etc.). Most websites just need a DV level and doesn’t require much verification on your end. Also, your name won’t appear on the certificate so you can keep privacy in that respects…great for blogs.

It also improves your Search Engine Optimization (SEO).

3 Likes