Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
HTTPS
open-in-new
<p>Hypertext Transfer Protocol Secure (HTTPS) is an extension of the <a href="/facts/Hypertext_Transfer_Protocol/TWtvf7JD">Hypertext Transfer Protocol</a> (HTTP). It uses <a href="/facts/Encryption/16q29Fdv">encryption</a> for <a href="/facts/Secure_communications/tp0Q3jHp">secure communication</a> over a <a href="/facts/Computer_network/3w5RM99p">computer network</a>, and is widely used on the <a href="/facts/Internet/Xw1rVvJU">Internet</a>. In HTTPS, the <a href="/facts/Communication_protocol/5uady7cB">communication protocol</a> is encrypted using <a href="/facts/Transport_Layer_Security/pGy16TnA">Transport Layer Security</a> (TLS) or, formerly, <a href="/facts/Secure_Sockets_Layer/pGy16TnA">Secure Sockets Layer</a> (SSL). The protocol is therefore also referred to as HTTP over TLS, or HTTP over SSL. </p><p>The principal motivations for HTTPS are <a href="/facts/Authentication/64y4S69b">authentication</a> of the accessed <a href="/facts/Website/SAsjJnca">website</a> and protection of the <a href="/facts/Information_privacy/fb6DMpdN">privacy</a> and <a href="/facts/Data_integrity/g3XGbKIH">integrity</a> of the exchanged data while it is in transit. It protects against <a href="/facts/Man-in-the-middle_attack/dx4cojdz">man-in-the-middle attacks</a>, and the bidirectional <a href="/facts/Block_cipher_mode_of_operation/vIUabB2z">block cipher encryption</a> of communications between a client and server protects the communications against <a href="/facts/Eavesdropping/Rkqmt8I2">eavesdropping</a> and <a href="/facts/Tamper-evident/VICY21Pt">tampering</a>. The authentication aspect of HTTPS requires a trusted third party to sign server-side <a href="/facts/Public_key_certificate/J7aYI4Bx">digital certificates</a>. This was historically an expensive operation, which meant fully authenticated HTTPS connections were usually found only on secured payment transaction services and other secured corporate information systems on the <a href="/facts/World_Wide_Web/wvnTrWFq">World Wide Web</a>. In 2016, a campaign by the <a href="/facts/Electronic_Frontier_Foundation/vCy44tuo">Electronic Frontier Foundation</a> with the support of <a href="/facts/Web_browser/2pfyymLs">web browser</a> developers led to the protocol becoming more prevalent. HTTPS is now[<i>when?</i>] used more often by web users than the original, non-secure HTTP, primarily to protect page authenticity on all types of websites, secure accounts, and keep user communications, identity, and web browsing private. </p>