HTTPS (Hypertext Transfer Protocol Secure) is a rule for how to communicate on the Internet. HTTPS, also known as HTTP Secure or HTTP over SSL/TLS, indicates that communication is encrypted using SSL or TSL, which increases the security of HTTP.
Specifically, HTTP communication is performed in a data transmission path encrypted by SSL or TSL, and “http://” is displayed at the beginning of the URL of a web page on the Internet. You can see that the communication is using encrypted HTTPS.
Similar to HTTPS, communication methods that are encrypted using SSL or TSL include SMTPS, which encrypts SMTP, POP3S, which encrypts POP3, and IMAPS, which encrypts IMAP4, which are used for email.
The need for HTTPS
In recent years, the number of incidents of eavesdropping, tampering, and spoofing targeting unencrypted communications on the Internet has increased. HTTP, the standard for communication on the Internet, is unencrypted, making it an increasingly likely target for malicious attacks.
HTTPS is encrypted using SSL or TSL, which increases security during communication over the Internet. Therefore, it is recommended to use HTTPS.
Certificate (SSL server certificate)
By using HTTPS, you can encrypt communication, which increases the possibility of preventing eavesdropping, tampering, and spoofing of communication. However, if the communication partner itself is fake, malicious attacks cannot be prevented.
Communication via the Internet is convenient because communication can be easily established with a large number of unspecified parties, but on the other hand, it is necessary to carefully judge whether the communication partner is a safe party from a security standpoint.
HTTPS uses a “certificate (SSL
server
certificate)” that can confirm the communication partner. A lock icon is displayed before “http://” at the beginning of the URL of a web page on the Internet. By clicking the lock icon, you can check detailed information such as the issuer and issuer of the certificate (SSL server certificate).
Reference article
