What is the difference between HTTP and HTTPS? What is an SSL certificate? Advantages of using an ssl certificate?

What is SSL?

SSL refers to Secure Sockets Layer (and Transport Layer Security protocol TLS), located between TCP/IP protocols and various application-layer protocols, providing security support for data communication, and is currently the most widely used security protocol. It provides a secure information channel between two machines operating over an Internet or internal network connection, namely HTTPS.

1.1 Encrypts information during data transmission

1.2 Identifies the certificate owner's identity through a unique SSL credential.

1.3 Verifies the certificate owner's identity first, then issues an SSL certificate

What is the difference between HTTP and HTTPS?

HTTP (Hypertext Transfer Protocol) is a transfer protocol used to transmit hypertext on the Internet. It can make browsers more efficient and reduce network transmission. However, the HTTP protocol transmits information in plaintext, posing risks of information eavesdropping, information tampering, and information hijacking.

HTTPS (Secure Hypertext Transfer Protocol) is a secure communication channel developed based on HTTP and used to exchange information between client computers and servers. HTTPS uses Secure Sockets Layer (SSL) for information exchange. Simply put, HTTPS is the secure version of HTTP and is an HTTP protocol encrypted with TLS/SSL.

What is an SSL digital certificate (SSL certificate)?

A type of digital certificate, similar to an electronic copy of a driver's license, passport, and business license. Because it is configured on a server, it is also called an SSL server certificate. An SSL certificate is one that complies with the SSL protocol and is issued by a trusted digital certificate authority CA (such as GlobalSign, wosign) after verifying the server identity, with server identity authentication and data transmission encryption functions.

CA:

That is, the certificate authority (CA, Certificate Authority). CA is the authority responsible for issuing certificates, authenticating certificates, and managing issued certificates. After a user submits an application to the CA, the CA is responsible for reviewing the user's information, then uses the private key to "sign" the key information and makes the corresponding public key public. The client can use the public key to verify the signature.

CSR:

CSR (Certificate Signing Request) is the certificate request file, that is, when the certificate applicant applies for a digital certificate, the CSP (Cryptographic Service Provider) generates the certificate request file at the same time as generating the private key. As long as the certificate applicant submits the CSR file to the certificate authority, the certificate authority uses its root certificate private key to sign it and generates the certificate public key file, which is the certificate issued to the user.

What are the advantages of using an SSL certificate?

Starting from January 1, 2017, Google's Chrome browser will mark websites that are not encrypted with HTTPS as "not secure" websites;

At the same time, all iOS applications in Apple's App Store will be forced to adopt the ATS standard, that is, HTTPS will be mandatory;

Mini programs, which are booming in China, also require the use of HTTPS requests.

1. Prevent traffic hijacking
Site-wide HTTPS is a solution to fundamentally cure traffic hijacking by operators and man-in-the-middle attackers. It not only eliminates small advertisements inserted into web pages, but also better protects users' privacy and security.

2. Improve search rankings
Adopting HTTPS can help improve search rankings, enhancing the site's credibility and brand image.

3. Eliminate phishing websites
The green icon in the HTTPS address bar can help users identify phishing websites, ensure that the interests of users and enterprises are not harmed, and enhance user trust.