http与https的区别

http是将内容文字通过tcp传送，内容是明文，未经加密，可透过tcpdump偷看。

https将内容文字用不对称的方式加密后再传送，加密协议是TLS或SSL，透过tcpdump看到的内容是乱码。而且服务器端更换密钥无需通知client。

How hackers love your HTTP data
https://blog.usejournal.com/how-hackers-love-your-http-data-157e76f2c66a

How you could get hacked at a coffee shop
https://medium.com/bugbountywriteup/how-you-could-get-hacked-at-a-coffee-shop-3a81a53c0b4f

Hacker Lexicon: What Is HTTPS?
https://www.wired.com/2016/04/hacker-lexicon-what-is-https-encryption/

posted on 2021-02-04 17:00 paulwong 阅读(203) 评论(0) 编辑收藏所属分类: HTTP

paulwong