Page History

Basic Concepts (Summary)

What is HTTPS?

HTTPS (HyperText Transfer Protocol Secure) is the secure version of HTTP. It uses SSL/TLS to encrypt the communication between client and server, ensuring:

• • Confidentiality – Data is encrypted and cannot be read by third parties.

  • Authenticity – Verifies that the server is who it claims to be.

  • Integrity – Ensures that data has not been modified in transit.

What is SSL/TLS?

SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are cryptographic protocols that:

• • Establish a secure channel between two endpoints.

  • Use asymmetric encryption to exchange a symmetric session key.

  • Require a digital certificate to prove the server’s identity.

What is a Digital Certificate?

A digital certificate is a file used to establish trust and enable encryption. It is:

• • Issued by a Certificate Authority (CA).

  • Used by the server to prove its identity to the client.

  • Typically stored in .pfx, .crt or .pem formats.

  • Contains the public key, server name, expiration date, and the CA signature.

Without a valid certificate, HTTPS cannot be established. The certificate must be installed and properly referenced in the server configuration.