当很多人看到两个不同的 URL 一个是HTTP^(HTTP)而另一个是HTTPS时，他们最终会感到困惑。那么这两者有什么区别呢？在这篇文章中，我将简单地讨论 HTTP 的演变以及HTTP和 HTTPS 之间的区别，^{(difference between HTTP and HTTPS)}以便它很容易理解。

什么是HTTP（超文本传输​​协议^{(HyperText Transfer Protocol)}）

在进入高级主题之前，总是有必要了解一些基础知识。HTTP代表超^(H)文本传输^(T)​​协议^{( P)}。_  _^(T) _ 它是用于在服务器和客户端之间传输和接收信息的系统。服务器^(Server)是放置您的网站代码的机器，而客户端只是您的浏览器。HTTP管理服务器和客户端之间的相互理解，以成功交换信息或数据。第一个HTTP只有一个称为GET的方法，它会从服务器请求一个页面，响应是一个HTML页。最新版本的HTTP定义了九种请求方法。

如果您访问任何网站，您可能会看到地址以HTTP :// 为前缀，这意味着您的浏览器现在使用^(HTTP)HTTP连接到服务器。现在HTTP不是建立连接的最安全方式，但HTTP的问题在于它容易受到可能想要窃听或查看您的活动的全部内容的人的攻击。

当您只是浏览任何网站或只是 Bing'ing 时，这不应该是任何问题，当您通过Internet进行金融交易时就会出现问题。众所周知，互联网^(Internet)并不是一个安全的地方。除了搜索和浏览网站，我们还需要进行货币交易、在线购买和安全文件传输。那么我们如何确保此类金融交易的安全呢？答案是HTTPS。

什么是 HTTPS（安全 HTTP）

HTTPS或Secure HTTP有些人可能称其为超文本传输​​协议^{(Hypertext Transfer Protocol)}( HTTP ) 与SSL/TLS协议的组合。现在，您通过HTTPS通信的所有内容都将以加密形式发送和接收^{(sent and received in encrypted form)}，这增加了安全性。

当客户端向服务器发出请求时，服务器通过提供加密方法列表进行响应。当客户端通过HTTPS连接到网站时，网站会使用数字证书对会话进行加密。安全^(Secure) 套接字^(Sockets) 层^(Layer)或SSL使用加密系统，该系统使用两个密钥加密数据，即浏览器和服务器相互发送唯一代码，用于在接下来的谈话中进行加密。

Https 用于许多情况，例如银行登录页面、表单、公司登录以及其他需要保护数据的应用程序。始终建议不要在HTTP^(HTTP)上运行的网站上输入信用卡详细信息。

阅读^(Read)： 网络安全威胁^{(Network Security Threats)}。

HTTP 和 HTTPS 之间的区别

1. 如果 HTTP URL 以“HTTP://”开头，而 HTTPS 连接则为“HTTPS://”
2. HTTP是不安全的，而HTTPS是安全的。
3. HTTP使用端口 80 进行通信，而HTTPS使用端口 443
4. 在HTTP^(HTTP)的情况下验证不需要证书。HTTPS需要SSL 数字证书^{(SSL Digital Certificate)}
5. HTTP中没有加密；在HTTPS^(HTTPS)中发送和接收之前加密的数据^(Data)。

希望这已经清除了HTTP^(HTTP)和HTTPS之间的区别。如果您有任何问题或意见，请发表评论。

您可以在此处阅读有关HTTPS 安全和欺骗的信息。

Difference between HTTP and HTTPS Protocol

A lot of people end uр gеtting confused when theу sеe two different URL’s one аs HTTP and the other as HTTPS. So what is the difference between these two? In this post, I will discuss the evolution of HTTP and the difference between HTTP and HTTPS in simple terms so that it makes sense quite easily.

What is HTTP (HyperText Transfer Protocol)

It is always necessary to know something about basics before going to the advanced topics. HTTP stands for HyperText Transfer Protocol. It is the system for transmitting and receiving information across the server and the client. The Server is the machine where your website code is placed, and the client is nothing but your browser. HTTP manages the mutual understanding between the server and the client to exchange information or data successfully. The first HTTP had only one method called GET, which would request a page from the server and the response was an HTML page. The latest version of HTTP defines nine request methods.

If you visit any website you may see the address gets prefixed with HTTP:// this means your browser is now connected to the server using HTTP. Now the HTTP isn’t the safest way to establish a connection, the problem with HTTP though is that it is vulnerable to people who might want to eavesdrop or see what your activity is all about.

This shouldn’t be any concern when you are just browsing any website or just Bing’ing, the problem comes when you are making a financial transaction over the Internet. As we all know, the Internet is not exactly a safe place. Apart from searching and browsing websites, we need to engage in money transactions, online purchases, and secure file transfers. So how do we secure such financial transactions? The answer is HTTPS.

What is HTTPS (Secure HTTP)

HTTPS or Secure HTTP some may call it is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. Now everything you communicate over HTTPS will be sent and received in encrypted form, which adds the element of safety.

As when a client makes a request to the server, the server responds by offering a list of encryption methods. When the client connects to a website via HTTPS, the website encrypts the session with a digital certificate. Secure Sockets Layer or SSL uses a cryptographic system that encrypts data with two keys that is browser and server send each other unique codes which are used for encryption for the rest of the talk.

Https is used in many situations, such as log-in pages for banking, forms, corporate logins, and other applications in which data needs to be secured. It is always advised to never enter credit card details on websites that run on HTTP.

Read: Network Security Threats.

Difference between HTTP and HTTPS

1. In case of HTTP URL begins with “HTTP://” and for HTTPS connection it is “HTTPS://”
2. HTTP is unsecured on the other hand HTTPS is secured.
3. HTTP uses port 80 for communication unlike HTTPS which uses port 443
4. No certificates required for validation in the case of HTTP. HTTPS requires SSL Digital Certificate
5. No encryption in HTTP; Data encrypted before sending and receiving in HTTPS.

Hope this has cleared the difference between HTTP and HTTPS. If you have any questions or observations to make, please do comment.

You can read about HTTPS Security and Spoofing here.

Related posts

• 什么是常见的HTTP Status Code错误立场？

• 什么是Border Gateway Protocol？你的ISP use BGP是多少？

• 使用Group Policy禁用Internet Explorer 11作为standalone browser

• Service Attacks DDoS Distributed Denial：保护，Prevention

• 如何检查您的IP address是否泄漏

• 检查您的Internet Connection是否能够流媒体4K内容

• Screamer Radio是Windows PC的体面Internet Radio app

• 如何在Windows 10中添加Trusted Site

• TACHYON Internet Security是其他免费工具的体面替代方案

• Brute Force Attacks - Definition and Prevention

• 什么是Network Address Translator（NAT）？它有什么作用？我需要吗？

• Online Reputation Management Tips，Tools & Services

• 什么是403 Forbidden Error and How修复它？

• Internet and Social Networking Sites addiction

• 无法连接到Internet？ Try Complete Internet Repair Tool

• 如何在Windows 10 - IP Address Lookup上找到Router IP address

• 冲浪者VS Website业主VS广告拦截VS Anti Ad Blockers War

• Internet在Windows 10上更新后不起作用

• Allow或Chrome，Firefox，Edge，Opera，Internet Explorer的Allow或块Pop-Ups

• 如何在Microsoft Edge or Internet Explorer中禁用Auto Refresh