What is HTTPS?

Hypertext Transfer Protocol Secure (HTTPS) is an enhanced, secure version of HTTP, which is the foundational protocol used for data exchanges between web browsers and websites. HTTPS adds an encryption layer to HTTP, which is crucial for protecting data transfers, especially when users enter sensitive information, like bank login details, email credentials, or health records.

Websites that handle login credentials or other sensitive information should prioritize using HTTPS. In today's web browsers, like Chrome, there’s a visible distinction for sites using HTTPS, typically shown with a padlock icon in the URL bar, indicating a secure connection. Browsers such as Chrome flag non-HTTPS websites as 'not secure,' underscoring the importance of HTTPS for user safety online.

How does HTTPS work?

HTTPS employs an encryption protocol to secure communications, specifically using Transport Layer Security (TLS), which previously went by the name Secure Sockets Layer (SSL). This protocol enhances security through an asymmetric public key infrastructure, which relies on two distinct keys to protect data exchanges between parties:

1. Private Key – This key is securely held by the website owner and resides on the web server. It decrypts data that has been encrypted by its paired public key.
2. Public Key – Accessible to anyone interacting with the server, this key allows users to encrypt information, which can only be decrypted with the associated private key.

Read the full article here