Networking · 14 · 4 min read

HTTP, HTTPS and TLS

HTTP is how browsers ask for pages. HTTPS is the same thing inside an encrypted TLS tunnel.

A request in one line

GET /sound HTTP/1.1 — the browser asks; the server replies with a status code: 200 OK, 301 moved, 404 not found, 500 server error.

What TLS adds

  • Encryption — nobody on the path can read the data.
  • Integrity — nobody can change it without it being noticed.
  • Authentication — the certificate proves you really reached rahimly.com.

The padlock is not a trust badge

HTTPS only means the connection is private. A phishing site can have a perfect padlock too — always check the actual domain name.