Shulou(Shulou.com)06/02 Report--

What is the difference and relationship between HTTP and HTTPS? in view of this problem, this article introduces the corresponding analysis and solutions in detail, hoping to help more partners who want to solve this problem to find a more simple and feasible way.

What is the difference and connection between HTTP and HTTPS? To put it simply, HTTPS is an enhanced version of HTTP. Isn't that much easier to understand? Of course, after careful analysis, the difference and connection between HTTP and HTTPS does not stop there.

I. basic concepts

1. HTTP (HyperText Transfer Protocol: hypertext transfer Protocol) is an application layer protocol for distributed, collaborative and hypermedia information systems. Simply put, it is a way to publish and receive HTML pages, which is used to pass information between Web browsers and web servers.

HTTP works on port 80 of TCP protocol by default, and the standard HTTP service is the first step for users to visit the website http://.

HTTP protocol sends content in clear text and does not provide any way of data encryption. If an attacker intercepts the transmission message between Web browser and website server, he can read the message directly. Therefore, HTTP protocol is not suitable to transmit some sensitive information, such as credit card number, password and other payment information.

2. HTTPS (Hypertext Transfer Protocol Secure: hypertext transfer Security Protocol) is a kind of transmission protocol for secure communication through computer network. HTTPS communicates via HTTP, but uses SSL/TLS to encrypt packets. The main purpose of HTTPS development is to provide identity authentication to the website server and protect the privacy and integrity of the exchanged data.

HTTPS works on port 443 of TCP protocol by default, and its workflow is generally as follows:

1. TCP three synchronous handshakes

2. The client verifies the server digital certificate

3. DH algorithm negotiates the key of symmetric encryption algorithm and the key of hash algorithm.

4. SSL secure encryption tunnel negotiation completed

5. The web page is transmitted in an encrypted way, and the negotiated symmetric encryption algorithm and key encryption are used to ensure the data confidentiality; the negotiated hash algorithm is used to protect the data integrity to ensure that the data is not tampered with.

Second, the connection between HTTP and HTTPS:

In general, HTTP and HTTPS are the same because the underlying protocols are the same. As a HTTP or HTTPS browser, set up a port to connect to the Web server. When the server receives a request, the resource can be uniquely specified through the resource locator URI mode, and a status code and a response message are returned. The response message may be the information required by the user, or it may indicate an error message (obtained by the http protocol status code).

III. The difference between HTTP and HTTPS

HTTP plaintext transmission, the data is unencrypted, the security is poor, HTTPS (SSL+HTTP) data transmission process is encrypted, the security is good.

To use HTTPS protocol, you need to apply for a certificate from CA (Certificate Authority, digital certificate certification body). Generally, there are few free certificates, so you need to pay a certain fee. Certification authorities such as Symantec, Comodo, GoDaddy and GlobalSign.

The response speed of HTTP pages is faster than that of HTTPS, mainly because HTTP uses TCP three-way handshake to establish a connection, and the client and server need to exchange three packets, while HTTPS needs to add nine packets needed for ssl handshake in addition to the three packets of TCP, so there are a total of 12 packets.

HTTP and HTTPS use completely different connections and different ports, the former being 80 and the latter 443.

HTTPS is actually a HTTP protocol built on top of SSL/TLS, so comparing with HTTPS consumes more server resources than HTTP.

The answer to the question about the difference and connection between HTTP and HTTPS is shared here. I hope the above content can be of some help to everyone. If you still have a lot of doubts to be solved, you can follow the industry information channel to learn more about it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.