HTTP and HTTPS

HTTP is the application protocol used by browsers and web servers to exchange requests and responses.

HTTP

Plain HTTP does not protect traffic from observation or modification by systems along the network path.

http://example.com

HTTPS

HTTPS carries HTTP through TLS. TLS provides encryption, integrity protection and server authentication when certificates are validated correctly.

https://example.com

HTTPS protects data in transit, including credentials and session cookies, but it does not automatically make the application itself secure. A site can use HTTPS and still contain authorization, input-validation or business-logic weaknesses.