When we look at the address bar of a website, it’s either HTTP or HTTPS.

First say what is HTTP, HTTP is a hypertext transfer protocol, is based on request and response, stateless application layer protocol, often based on TCP/IP protocol transmission, is the Internet’s most widely used network protocol, all WWW files comply with this rule, HTTP is designed to provide a way to publish and receive HTML pages.

In the case of HTTPS, it is HTTP with a layer of SSL on the outside. HTTPS is a transport protocol for secure communication through the computer network. It uses SSL/TLS to establish a full channel for communication through HTTP.

HTTP features:

  1. Stateless: No memory of things, no storage, disconnection and disconnection.
  2. No connection: To establish a connection with the server through TCP three-way handshake and four-way wave. After multiple requests are sent, it is impossible to determine which phase is in progress.
  3. Introduction Fast, using plaintext communication.

In order to solve the stateless problem of HTTP, we use cookie and session technology to solve the stateless problem. Cookie is the method of our front end to solve the stateless problem by storing information in cookie, and session is the back end to solve the stateless problem.

HTTPS features:

  1. Content encryption, the use of mixed encryption technology, packet capture can not be directly seen.
  2. Authentication, through the client authentication server is their own access to the server.
  3. The integrity of your data is guaranteed, and others cannot modify your content.

HTTPS takes advantage of hybrid encryption, which is a mixture of symmetric and asymmetric encryption.

For more details, see the link below for more in-depth content. The original link: blog.csdn.net/xiaoming100…