So, let’s dive in.

What is HTTPS

HTTPS or Hypertext Transfer Protocol Secure is a technical way of transferring data between a web server and a web browser. Unlike HTTP (without S), this protocol attempts to secure the data being transferred.

All the websites we visit are hosted on a server somewhere far away. In order for us to access a website, we use a web browser like Google Chrome or Firefox to send a request to the server. After the server receives our request, in the absence of any errors or restrictions it responds with the data your browser needs to display the site.

Why HTTPS is Helpful

When a browser sends requests to a web server, it also sends data along with the request. Take for example, when you are trying to pay for an order on an online store, the request that will be sent may contain your card details. Hence there is a need to secure the medium through which your request and data are sent.

Thanks to HTTPS, your requests can be secured. Hence, your data is encoded (encrypted) such that it can not be intercepted and read by any unauthorised parties.

In the early 2010s, you will find HTTPS on mostly financial websites, big social media sites and web application that see the security of data transfer on their platform as a priority. However, in recent times almost all websites out there use HTTPS. This is a good thing but also brings us to the point we will be discussing in the next section.

What HTTPS is Not

HTTPS is not a one-fix-for-all solution for internet applications security. It is required by today’s standard as web browsers will flag a website as NOT Secure if it still using the non-secure HTTP protocol. Here is a list of few things HTTPS is not:

1. It is not an authenticity verification tool: What I mean by this is, because a website has HTTPS doesn’t guarantee that is a website that you can trust. For example, it is possible for a malicious person or group to set up a website and add HTTPS to the site. If you go ahead to enter sensitive data like your card details on such sites you expose yourself to risk.

2. HTTPS does not make you invincible: In addition to HTTPS, make sure to verify that you are actually on the right website when carrying out transactions online. If it is possible, look for the official/verified social media handles of online companies to confirm their websites and offers before clicking on them.

3. HTTPS is not unhackable: If you are a website owner, it is worth knowing that only having HTTPS on your site is not enough t defend it from hackers. You and your web developer will need to put in extra work in addition to HTTPS to prevent hacking that may lead to the leak of sensitive user data.

Summing Up

We have learnt what HTTPS is and what it isn’t. Stay Safe and always verify links and online forms before clicking on them. If you have a question, you can reach us via the livechat session on our homepage. Cheers and Stay Safe.

The post Is HTTPS Really Secure: What SSL/HTTPS is And is Not appeared first on Online Informed and Safe - OIS.