Hi there! Today we will be learning about HTTPS which is short for HyperText Transfer Protocol Secure. We will learn about what HTTPS is and what it is not. With the knowledge you will gain here, you will be better equipped to stay safe online. Also, since our thing here at Online Informed and Safe is building safety as a community, we believe you will use what you learn to help others near you.
So, let’s dive in.
What is HTTPS
HTTPS or Hypertext Transfer Protocol Secure is a technical way of transferring data between a web server and a web browser. Unlike HTTP (without S), this protocol attempts to secure the data being transferred.
All the websites we visit are hosted on a server somewhere far away. In order for us to access a website, we use a web browser like Google Chrome or Firefox to send a request to the server. After the server receives our request, in the absence of any errors or restrictions it responds with the data your browser needs to display the site.
Why HTTPS is Helpful
When a browser sends requests to a web server, it also sends data along with the request. Take for example, when you are trying to pay for an order on an online store, the request that will be sent may contain your card details. Hence there is a need to secure the medium through which your request and data are sent.
Thanks to HTTPS, your requests can be secured. Hence, your data is encoded (encrypted) such that it can not be intercepted and read by any unauthorised parties.
In the early 2010s, you will find HTTPS on mostly financial websites, big social media sites and web application that see the security of data transfer on their platform as a priority. However, in recent times almost all websites out there use HTTPS. This is a good thing but also brings us to the point we will be discussing in the next section.
What HTTPS is Not
HTTPS is not a one-fix-for-all solution for internet applications security. It is required by today’s standard as web browsers will flag a website as NOT Secure if it still using the non-secure HTTP protocol. Here is a list of few things HTTPS is not:
1. It is not an authenticity verification tool: What I mean by this is, because a website has HTTPS doesn’t guarantee that is a website that you can trust. For example, it is possible for a malicious person or group to set up a website and add HTTPS to the site. If you go ahead to enter sensitive data like your card details on such sites you expose yourself to risk.
2. HTTPS does not make you invincible: In addition to HTTPS, make sure to verify that you are actually on the right website when carrying out transactions online. If it is possible, look for the official/verified social media handles of online companies to confirm their websites and offers before clicking on them.
3. HTTPS is not unhackable: If you are a website owner, it is worth knowing that only having HTTPS on your site is not enough t defend it from hackers. You and your web developer will need to put in extra work in addition to HTTPS to prevent hacking that may lead to the leak of sensitive user data.
Summing Up
We have learnt what HTTPS is and what it isn’t. Stay Safe and always verify links and online forms before clicking on them. If you have a question, you can reach us via the livechat session on our homepage. Cheers and Stay Safe.
