Posts

Showing posts from November, 2018

httpS and SSL/TLS handshake

Image
What is HTTPS? HTTPS stands for "Hypertext Transfer Protocol Secure" . This is an extension of Hypertext Transfer Protocol (HTTP) for secure communication over a computer network. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or Secure Socket Layer (SSL) . Here servers and clients are still using HTTP to communicate with each other, but over a secure SSL connection that encrypts and decrypts the client-server requests and responses.  SSL ensures that all the requests and responses are directed to the legitimate destination and from a legitimate source, and also it ensures that only a legitimate server or a client can view the content of a request/response. Eavesdroppers will monitor the traffic, but they will not be able to read the content in the traffic since its encrypted. How SSL Works?  A Secure Socket Layer connection between client and server initiate with a "handshake". The goal is to satisfy the cli