Dn11 c u3_a9_xmm
Download as PPTX, PDF0 likes236 views
This document summarizes the HTTPS protocol. It discusses how HTTPS provides authentication of websites and servers to protect against man-in-the-middle attacks. It also provides bidirectional encryption of communications over the internet. Additionally, it notes that HTTPS encrypts the entirety of the underlying HTTP protocol, including request URLs, parameters, headers, and cookies. Finally, it clarifies that HTTPS is not performance heavy and can be deployed on existing equipment when used with technologies like SPDY that reduce page load times.
Dn11 c u3_a9_xmm
- 1. PROTOCOLO HTTP XÓCHITL MACÍAS MÁRQUEZ DN11C 16 DE NOVIEMBRE DEL 2012
- 2. This article's introduction may be too long for its overall length. Please help by moving some material from it into the body of the article. For more information please read the layout guide and Wikipedia's lead section guidelines. (Noviembre 2012)
- 3. In its popular deployment on the internet, HTTPS provides authenticationof the web site and associated web server that one is communicating with, which protects against Man-in-the-attacks Additionally, it provides bidirectional encryption of communications.
- 4. Because HTTPS piggybacks HTTP entirely on top of TLS, the entirety of the underlying HTTP protocol can be encrypted. This includes the request URL (which particular web page was requested), query parameters, headers, and cookies (which often contain identity information about the user).
- 5. E.g. if the user first accesses the front page of the website with HTTP where he only after that clicks an HTTPS link to the log-in page, the session has already been compromised.
- 6. A common misconception is that HTTPS is performance heavy and cannot be deployed on existing equipment.
- 7. Deploying HTTPS also allows the use of SPDY which is designed to reduce page load times and latency.
- 8. HTTPS is a URI scheme which has identical syntax to the standard HTTP scheme, aside from its scheme token. However, HTTPS signals the browser to use an added encryption layer of SSL/TLS to protect the traffic.
- 9. The main idea of HTTPS is to create a secure channel over an insecure network. This ensures reasonable protection from eavesdroppers and man-in-the-middle attacks provided that adequate cipher suites are used and that the server certificate is verified and trusted.