[StBernard] http vs https

Westley Annis Westley at da-parish.com
Mon Jan 12 23:36:02 EST 2009


Editors note: Both Internet Explorer and Firefox will display a lock when
you are accessing a site via HTTPS. Internet Explorer (v7) displays its lock
just to the right of the Address bar and Firefox (v3) displays the lock in
the bottom right corner of the window.

Sometimes you will also see the address bar turn green when accessing a site
via HTTPS. This means the website is using a little bit of extra security
and the browser was able to validate the website is correct.

And, not to scare anyone, but expect to hear more stories about HTTPS in the
coming months since it a flaw has been discovered in the encryption protocol
that HTTPS uses. While it hasn't been exploited yet, you can bet that
someone is working on it now.

-----------------------------
Difference between http and https

This is something not discussed often enough. Say you're charging
something at Eddie Bauer on the web. Once you go to the credit card
section just make certain https is in the address above NOT http.

Don't know how many are aware of this difference, but worth sending to any
that do not...... What is the difference between http and https

Maybe you already knew this, but I thought it was important enough to send
even if you already know.

I didn't know this.....................

FIRST, MANY PEOPLE ARE UNAWARE OF **The main difference between http://
<http:///> <http:///>
<http:///>

http vs. https
<http:///> Claim: <http:///> Article explains the difference between http
and https protocols.

<http:///> TRUE <http:///>

<http:///> Example: <http:///> <http:///> [Collected via e-mail, January
2009] <http:///>

The main difference between http:// and https://

FIRST, MANY PEOPLE ARE UNAWARE OF

**The main difference between http:// and https:// is It's all about keeping
you secure**

HTTP stands for HyperText Transport Protocol, Which is just a fancy way of
saying it's a protocol (a language, in a manner of speaking) for information
to be passed back and forth between web servers and clients. The important
thing is the letter S which makes the difference between HTTP and HTTPS.

The S (big surprise) stands for "Secure". If you visit a website or webpage,
and look at the address in the web browser, it will likely begin with the
following: http://.

This means that the website is talking to your browser using the regular
'unsecure' language. In other words, it is possible for someone to
"eavesdrop" on your computer's conversation with the website. If you fill
out a form on the website, someone might see the information you send to
that site.

This is why you never ever enter your credit card number in an http website!
But if the web address begins with https://, that basically means your
computer is talking to the website in a secure code that no one can
eavesdrop on.

You understand why this is so important, right?

If a website ever asks you to enter your credit card information, you should
automatically look to see if the web address begins with https://. If it
doesn't, there's no way you're going to enter sensitive information like a
credit card number.

PASS IT ON (You may save someone a lot of grief).


<http:///> Origins: <http:///> The information presented above is
generally correct: Accessing a web site through a URL that begins with the
<http:///> https:// <http:///> protocol identifier indicates that
information is being transmitted via Secure HTTP protoco or Secure Sockets
Layer (SSL), protocols which encrypt information passed between a client
(browser) and a
server (web site). It is especially important to ensure a secure protocol is
in use for functions (such as online purchases and bank transactions) that
involve the transmission of credit card numbers, account numbers, Social
Security numbers, PINs, and other sensitive personal information in order to
prevent electronic eavesdroppers from snooping on web activity and thereby
gaining access to (unencrypted forms of) such data.

Certainly using an unsecure (http://) connection to send sensitive
information is a situation best avoided. However, due to proliferation of
digital spoofing schemes, a secure (https://) connection is not necessarily
an absolute guarantee of Certainly us engaging in financial transactions
over the Internet, you should still take steps to ensure you are dealing
with a reputable entity, and that you are actually connected to a web site
operated by the entity you are dealing with (rather than a look-alike site
set up as a deception by cybercrooks).

<http:///> Last updated: <http:///> 6 January 2009

<http:///> The URL for this page is
http://www.snopes.com/computer/internet/https.asp

mah





More information about the StBernard mailing list