HTTPS

E7608

HTTPS is the secure version of the HTTP protocol that encrypts data exchanged between a client and server to protect confidentiality and integrity on the web.


Statements (53)
Predicate Object
instanceOf application layer protocol
network protocol
defaultPort 443
definedIn RFC 2818
RFC 7230
RFC 9110
doesNotProvide end-to-end anonymity
fullName Hypertext Transfer Protocol Secure
layer application layer
mayUse client certificates
portNumber 443
provides authentication
confidentiality
integrity
purpose protect confidentiality of data in transit
protect integrity of data in transit
provide server authentication
reduce risk of eavesdropping
reduce risk of man-in-the-middle attacks
reduce risk of tampering
secure communication over a computer network
relationshipTo successor to HTTP for secure transport
requires server certificate issued by a certificate authority
runsOver SSL
TLS
schemeName https
securityDependsOn correct certificate validation by clients
trust in certificate authorities
standardizedBy IETF
supports HTTP/1.1
HTTP/2
HTTP/3
urlPrefix https://
usedFor data submission forms
e-commerce
email web interfaces
login pages
online banking
web APIs
web browsing
uses TLS handshake
X.509 certificates
certificate authorities
cipher suites
digital certificates
encryption
integrity protection
message authentication codes
public key cryptography
server-side certificates
symmetric key cryptography
usesUnderlyingProtocol HTTP
visibleIndicator padlock icon in most browsers


Please wait…