- [Instructor] HTTPS is a method
to encrypt standard HTTP traffic.
This is accomplished in layer seven
of the OSI model via Transport Layer Security,
or the older secure socket layer.
It creates a secure conduit for communication
between the client and the server.
HTTPS is commonly used for banking,
online purchases and email,
or anything and everything with sensitive or private data.
Today, HTTPS now accounts for most
of standard browsing on the internet.
Encryption protects against man-in-the-middle attacks
as well as interception of sensitive information.
Encrypting HTTP with TLS adds the additional benefit
of encrypting all of the underlying protocol.
This means the exact URL, cookies,
and headers are all hidden.
The encryption process hinges on digital certificates.
These digital certs contain public tokens used
in the cryptographic process.
They are issued by known
and trusted certificate authorities, or CAs.
A server that wishes to host a secure website
must go through the certificate enrollment process.
They first create a request.
This request is then sent to a CA
who generates a certificate.
This issued certificate can then be installed on the server.
Web browsers have a list of major CAs
and can verify certificates
as they are presented by various websites.
HTTPS is essential
for modern day web browsing communications.
It provides the confidence necessary
to transmit the most sensitive pieces
of information over the internet.