Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Difference between HTTPS and SSL

What is the difference between HTTPS and SSL? I read about them and found following:

  • HTTPS: HTTPS is a combination of HTTP with SSL/TLS. It means that HTTPS is basically HTTP connection which is delivering the data secured using SSL/TLS.

  • SSL: SSL is a secure protocol that works on the top of HTTP to provide security. That means SSL encrypted data will be routed using protocols like HTTP for communication.

I am wondering where is the difference between these two? Or both are identical?

like image 762
bayCoder Avatar asked May 23 '11 06:05

bayCoder


People also ask

Which is better HTTPS or SSL?

HTTPS (Hyper Text Transfer Protocol Secure) is the secure version of HTTP where communications are encrypted by SSL/TLS. HTTPS uses TLS (SSL) to encrypt normal HTTP requests and responses, making it safer and more secure.

What is difference between HTTPS TLS and SSL?

HTTPS is just the HTTP protocol but with data encryption using SSL/TLS. SSL is the original and now deprecated protocol created at Netscape in the mid 90s. TLS is the new protocol for secured encryption on the web maintained by IETF.

Is HTTPS always SSL?

For many years, HTTPS used SSL as its standard protocol. However, there is now a newer version of SSL, which is called TLS.

Is HTTPS certificate the same as SSL certificate?

The S in "HTTPS" stands for "secure." HTTPS is just HTTP with SSL/TLS. A website with an HTTPS address has a legitimate SSL certificate issued by a certificate authority, and traffic to and from that website is authenticated and encrypted with the SSL/TLS protocol.


1 Answers

The explanation of SSL that you've found is wrong.

SSL (Secure Socket Layer) or TLS (Transport Layer Security) works on top of the transport layer, in your examples TCP. TLS can be used for more or less any protocol, HTTPS is just one common instance of it.

HTTP is an application layer protocol.

In regular, non-encrypted HTTP, the protocol stack can look like this:

  • HTTP
  • TCP
  • IP
  • Ethernet

When using HTTPS, the stack looks like this:

  • HTTP
  • TLS (SSL)
  • TCP
  • IP
  • Ethernet
like image 116
Anders Lindahl Avatar answered Oct 24 '22 19:10

Anders Lindahl