Tuesday, 4 January 2022

HTTP means text trasnfer, HTTPS means SSL/TLS encryption - need to have it in browser, or curl cmd, or else uses default http

 https://security.stackexchange.com/questions/81801/why-do-browsers-default-to-http-and-not-https-for-typed-in-urls


Why browser and cmd line uses default http if not specified in url ?


  1. HTTPS support is not automatically configured on websites. Therefore, why should browsers assume it is?
  2. Saying that a website is not accessible unless using a specific scheme would be over the heads of a significant number of users.
  3. Switching to HTTPS is not as simple as it seems in some cases. Take Stack Exchange for example.



https://www.quora.com/Why-do-we-use-HTTP-or-HTTPS-in-a-URL

Why do we use HTTP or HTTPS in a URL?

Http request tells the Web server that you want to communicate without the security of encryption.

Https request tells the Web server that you want to have secure encrypted communication with the Web server.

To enable https access for a website the webmaster / system administrator needs to setup a SSL certificate[1].




Default port for http is 80

Default port for https is 443


if no port specified browser or curl uses 80 for http

If no port specified browser or curl uses 443 for http



Default url is http if not specified 

No comments:

Post a Comment