Cambridge O Level Computer Science · Syllabus 2210 · The Internet and its Uses
Hypertext Transfer Protocol Secure
What is Hypertext Transfer Protocol Secure?
HTTPS is HTTP with a security layer: data is encrypted before transmission and the web server is authenticated by a digital certificate, so intercepted data cannot be understood and the browser can check it is connected to the claimed site.
This definition is part of the The Internet and its Uses chapter in Cambridge O Level Computer Science.
Hypertext Transfer Protocol Secure in context
HTTP (hypertext transfer protocol) is the set of rules that governs how a web browser and a web server exchange web pages and other resources: the browser sends a request for a named resource, and the server returns a response containing a status and, where possible, the resource itself. HTTPS (hypertext transfer protocol secure) is the same request-and-response protocol with security added: the data is encrypted before transmission, and the server proves its identity with a digital certificate. HTTPS therefore protects data in transit; it makes no claim at all about whether the website's content, owner or business is honest.
Questions students ask about Hypertext Transfer Protocol Secure
What is the difference between HTTP and HTTPS?
HTTP (hypertext transfer protocol) governs how a browser requests web resources and how a server responds, and the data it carries is not encrypted. HTTPS (hypertext transfer protocol secure) is the same request-and-response protocol with encryption added, and the server proves its identity with a digital certificate. HTTPS protects the data in transit and authenticates the server, but it makes no claim about whether the website's content, seller or business is trustworthy — a criminal can run a fake shop over a valid HTTPS connection.