HTTPS

HTTPS is syntactically identical to HTTP, the scheme mostly used to surf the web. It indicates the presence of HTTP but uses a different TCP port. It assures security by placing an additional layer of encryption and authentication in between the HTTP and TCP. Encryption is provided by a TLS (Transport Layer Security) or an SSL (Secure Sockets Layer) connection. This ensures that sensitive information will be protected from third-party sources and man in the middle attacks. The HTTPS system is also used for client authentication. This is often done to limit web server access only to users who have been authorized. In this instance, a website administrator creates certificates for all of their users. The certificates are installed into the browser and usually contain an authorized user’s name and email address. This information is automatically accessed by the server upon each request to verify a user’s credentials. When configured properly by the administrator, a user can access the specific web page without entering login and password details.