Shulou(Shulou.com)06/01 Report--

This article mainly introduces what is the difference between HTTP and HTTPS, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to understand it.

1. HTTP

HTTP (HyperText Transfer Protocol), the hypertext transport protocol, is a specification for network communication.

In the computer and network world, there are different protocols, such as broadcast protocol, addressing protocol, routing protocol and so on.

HTTP is a transmission protocol, that is, data is transferred from A to B or B to A, and many third parties can be stored between An and B, such as AXYZB.

The transmitted data is not a binary package at the bottom of the computer, but complete and meaningful data, such as HTML files, picture files, query results and other hypertext, which can be recognized by upper layer applications.

In practical applications, HTTP is often used to transmit information between Web browsers and web servers, sending content in clear text without providing any form of data encryption

The features are as follows:

Support client / server mode

Simple and fast: when a customer requests a service from the server, it only needs to send the request method and path. Because the HTTP protocol is simple, the program size of the HTTP server is small, so the communication speed is fast.

Flexibility: HTTP allows the transfer of any type of data object. The type being transmitted is marked by Content-Type

Connectionless: connectionless means limiting the processing of only one request per connection. After the server processes the customer's request and receives the customer's reply, it disconnects. In this way, transmission time can be saved.

Stateless: the HTTP protocol cannot process this request based on the previous status

II. HTTPS

In the above introduction HTTP, it is not safe to learn that the HTTP message is sent in clear text. And HTTPS appears to solve the unsafe feature of HTTP.

In order to ensure that these private data can be encrypted and transmitted, let HTTP run on the secure SSL/TLS protocol, namely HTTPS = HTTP + SSL/TLS, verify the identity of the server through the SSL certificate, and encrypt the communication between the browser and the server.

SSL protocol is located between TCP/IP protocol and various application layer protocols. Browsers and servers need to choose a set of appropriate encryption algorithms to achieve secure communication when using SSL to establish a connection, so as to provide secure support for data communication.

The flowchart is as follows:

First, the client establishes a SSL connection through the URL access server

After receiving the request from the client, the server will send a copy of the certificate information supported by the website (the certificate contains the public key) to the client.

The server of the client begins to negotiate the security level of the SSL connection, that is, the level of information encryption

The browser of the client establishes the session key according to the agreed level of security, then encrypts the session key using the public key of the website and transmits it to the website

The server decrypts the session key using its own private key

The server uses the session key to encrypt the communication with the client

III. Differences

HTTPS is the secure version of HTTP protocol. The data transmission of HTTP protocol is plaintext and insecure. HTTPS uses SSL/TLS protocol for encryption, which is relatively more secure.

HTTP and HTTPS use different connection methods, and the default port is also different. HTTP is 80 and HTTPS is 443.

Due to the need to design encryption and multiple handshakes, HTTPS is not as good as HTTP in performance

HTTPS needs SSL,SSL certificate and costs money. The more powerful the certificate, the higher the fee.

Thank you for reading this article carefully. I hope the article "what's the difference between HTTP and HTTPS" shared by the editor will be helpful to you. At the same time, I also hope you will support us and pay attention to the industry information channel. More related knowledge is waiting for you to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.