Think together · Start with a story
A girl does not want people along the way to read the information she sends to a website. What protection does HTTPS add to ordinary HTTP?
Break down the process
- HTTPDescribes requests and responses
- TLSSets up a protected channel
- HTTPSCommunicates through that protection
HTTPS is HTTP communication protected by security mechanisms such as TLS.
It helps verify the service you connected to and protects data in transit for confidentiality and integrity. Imagine putting a letter in a box that only the two communicating sides can open, though the real mechanism uses cryptographic calculations.
A browser certificate warning signals a problem with connection verification and should be taken seriously.
Your turn to try
Could a scam website also use HTTPS?
Ready? Open to see the explanation
Yes. An encrypted channel can connect you to someone untrustworthy. Check the full domain name and whether the request makes sense.
One idea to remember
HTTPS is HTTP communication protected by security mechanisms such as TLS.
Try covering the picture above and explaining each step to your family. If one step is hard to explain, revisit that card.