What is HTTP and HTTPS: Web Browsing and Network Connections

To understand how you browse the web, think of the internet as a massive network of roads. Your web browser (the client) is a car traveling down those roads to fetch information from a building (the web server).
HTTP and HTTPS are the traffic rules that determine how that information is loaded into your car and carried back to you.

What is HTTP? (The Open Flatbed)

HTTP stands for Hypertext Transfer Protocol. Introduced in the early days of the internet, it is the foundational protocol used to transmit data—like text, images, and video—from a website’s server to your browser.
When you use HTTP, data is sent in plain text.

User Browser  ------ [ MyPassword123 ] ------>  Website Server

Because it is unencrypted, an HTTP connection is highly vulnerable. If you are on a public Wi-Fi network, anyone with basic hacking tools sitting between your browser and the server can intercept your data and read it perfectly. This is known as a Man-in-the-Middle (MitM) attack.

What is HTTPS? (The Armored Vault)

HTTPS stands for Hypertext Transfer Protocol Secure. It functions exactly like HTTP, but with one critical addition: it wraps your data in a layer of encryption using TLS (Transport Layer Security).
When you use HTTPS, the same data is scrambled before it ever leaves your device:

User Browser  ------ [ x9!kL#mQ2$zP ] ------>  Website Server

If a hacker intercepts an HTTPS connection, they won’t see your password or credit card number. They will only see a useless jumble of random characters.

How Connections Are Established

The way these two protocols behave across a network network comes down to ports and handshakes. A network port is like a specific docking bay on a server where data can enter or leave.

1. The HTTP Connection (Port 80)

HTTP connections are quick but insecure. Your browser opens a channel to the server on Port 80 and immediately begins requesting data. There is no identity verification; your browser simply trusts that the server is who it claims to be.

2. The HTTPS Connection (Port 443)

HTTPS connections utilize Port 443 and require a multi-step verification process before any web data is shared. This is called the TLS Handshake:

• The Hello: Your browser connects to the server and shares its supported security settings.
• The Certificate: The server responds with its SSL/TLS Certificate. This acts like a digital passport issued by a trusted authority, proving the website is legitimate (e.g., confirming bank.com is actually owned by your bank, not a scammer).
• The Key Exchange: Your browser verifies the certificate. The browser and server then securely generate a matching pair of temporary session keys.
• Secure Browsing: The handshake closes, the connection becomes encrypted, and the webpage finally loads.

Summary of Differences