What is HTTP

- HTTP stands for HyperText Transfer Protocol. It is the system for transmitting and receiving information across server and the client. The Server is the machine where your website code is placed and client is nothing but your browser. HTTP manages the mutual understanding between server and the client to exchange information or data successfully. The first HTTP had only one method called as GET, which would request a page from server and the response was a HTML page. The latest version of HTTP defines nine request methods.

- If you visit any website you may see the address gets prefixed with HTTP:// this means your browser is now connected to the server using HTTP. Now the HTTP isn’t the safest way to establish a connection, the problem with http though is that it is vulnerable to people who might want to eavesdrop or see what your activity is all about.

- HTTPS or Secure HTTP some may call it is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. Now everything you communicate over HTTPS will be sent and received in encrypted form, which adds the element of safety.

- As when a client makes a request to the server, the server responds by offering a list of encryption methods. When the client connects to a website via HTTPS, the website encrypts the session with a digital certificate. Secure Sockets Layer or SSL uses a cryptographic system that encrypts data with two keys that is browser and server send each other unique codes which are used for encryption for rest of the talk.

- Https is used in many situations, such as log-in pages for banking, forms, corporate logins, and other applications in which data needs to be secured. It is always advised to never enter credit card details on websites that run on HTTP.

**The Differences between HTTP & HTTPS**

1) In case of HTTP URL begins with “HTTP://” and for HTTPS connection it is “HTTPS://”

2) HTTP is unsecured on other hand HTTPS is secured.

3) HTTP uses port 80 for communication unlike HTTPS which uses port 443

4) No certificates required for validation in case of HTTP. HTTPS requires SSL Digital Certificate

5) No encryption in HTTP; Data encrypted before sending and receiving in HTTPS.

**Reference**

http://www.thewindowsclub.com/difference-http-https