Think it through · Start with a story
The girl submits information to a legitimate website and hopes that devices along the way cannot casually read or change it. The robot explains that protection mainly applies while the information is being transmitted.
Break down the process
- Verify the connectionCheck the service’s identity
- Agree on protectionEstablish a secure channel
- Send informationEncrypt it and detect tampering
- ServerProcess the request
HTTPS helps protect communication between a browser and a service.
It provides protections such as confidentiality and integrity during transmission, reducing the risk of someone reading or changing data along the way. The browser uses mechanisms such as certificates to verify the service it connects to.
After a website receives information you submit, it still needs to handle and store that information responsibly.
Your turn to try
If you enter a password into an encrypted form on a fake website, does encryption keep the password from the fake site?
Have you decided? Open to see the explanation
No. Encryption protects the channel to that website, but the recipient still gets what you submit.
Take away one discovery
HTTPS helps protect communication between a browser and a service.
Try covering the diagram above and explaining each step to someone at home. If one step is unclear, go back and look at that card again.