HTTP and HTTPS in Computer Networks - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does HTTP stand for?

HTTP stands for HyperText Transfer Protocol. It is the basic protocol used to transfer web pages on the internet.

beginner

What is the main difference between HTTP and HTTPS?

HTTPS is HTTP with encryption. It uses SSL/TLS to secure data between your browser and the website, protecting it from eavesdropping.

beginner

Why is HTTPS important for websites?

HTTPS protects sensitive information like passwords and credit card numbers by encrypting the data, making it hard for attackers to steal or change it.

intermediate

What does SSL/TLS do in HTTPS?

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) create a secure, encrypted connection between your device and the website, ensuring data privacy and integrity.

beginner

How can you tell if a website is using HTTPS?

You can see HTTPS in the website address (URL) starting with "https://" and often a padlock icon in the browser's address bar.

What does HTTPS add to HTTP?

A Encryption for secure communication

B Faster loading speed

C More images on the page

D Better colors on the website

HTTPS adds encryption to HTTP to secure data transfer between your browser and the website.

Which symbol usually shows that a website uses HTTPS?

A A warning triangle

B A padlock icon

C A star icon

D A heart icon

A padlock icon in the browser's address bar indicates the website uses HTTPS and has a secure connection.

What kind of information does HTTPS help protect?

A Page layout

B Website colors

C Passwords and credit card numbers

D Font styles

HTTPS encrypts sensitive information like passwords and credit card numbers to keep them safe.

Which protocol is used to secure HTTPS connections?

A HTTP/2

B FTP

C SMTP

D SSL/TLS

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) protocols secure HTTPS connections.

What does HTTP stand for?

A HyperText Transfer Protocol

B Hyperlink Text Transfer Process

C HyperText Transmission Program

D Hyperlink Transfer Protocol

HTTP stands for HyperText Transfer Protocol, the main protocol for web communication.

Explain in simple terms what HTTPS is and why it is important for internet users.

Think about how your personal info stays safe when you shop online.

Describe how you can recognize if a website is secure using HTTPS when browsing the internet.

Look at the address bar in your web browser.

Practice

1. What is the main difference between HTTP and HTTPS?

easy

A. HTTPS encrypts data, HTTP does not

B. HTTP encrypts data, HTTPS does not

C. HTTP is faster than HTTPS

D. HTTPS uses a different port than HTTP but no encryption

Solution

1. Step 1: Understand HTTP basics

   HTTP is a protocol used to load websites but it sends data in plain text.

2. Step 2: Understand HTTPS security

   HTTPS adds encryption to protect data from being read by others during transmission.

3. Final Answer:

   HTTPS encrypts data, HTTP does not -> Option A

4. Quick Check:

   Encryption = HTTPS [OK]

Hint: HTTPS means secure by encrypting data [OK]

Common Mistakes:

• Thinking HTTP encrypts data
• Believing HTTPS is slower without reason
• Confusing port difference as main feature

2. Which URL prefix indicates a secure website connection?

easy

A. https://

B. ftp://

C. http://

D. file://

Solution

1. Step 1: Identify URL prefixes

   Common URL prefixes include http:// for normal sites and https:// for secure sites.

2. Step 2: Match secure prefix

   HTTPS means the connection is encrypted and secure.

3. Final Answer:

   https:// -> Option A

4. Quick Check:

   Secure URL = https:// [OK]

Hint: Look for 'https://' to know site is secure [OK]

Common Mistakes:

• Choosing http:// as secure
• Confusing ftp:// with secure web protocol
• Not recognizing https:// as secure

3. What will happen if you try to access a website with https:// but the server only supports http://?

medium

A. The browser will automatically switch to http:// and load the site

B. The browser will show a security warning or error

C. The website will load but without encryption

D. The connection will be blocked by the internet provider

Solution

1. Step 1: Understand HTTPS requirement

   HTTPS requires the server to support encryption with a valid certificate.

2. Step 2: Browser behavior on unsupported HTTPS

   If the server does not support HTTPS, the browser cannot establish a secure connection and will warn the user.

3. Final Answer:

   The browser will show a security warning or error -> Option B

4. Quick Check:

   Unsupported HTTPS = Warning [OK]

Hint: No HTTPS support means browser warns user [OK]

Common Mistakes:

• Assuming browser silently switches to HTTP
• Thinking site loads without encryption anyway
• Believing ISP blocks connection

4. A user reports that their browser shows a "Not Secure" message on a website using https://. What is the most likely cause?

medium

A. The browser does not support HTTPS

B. The website is using HTTP instead of HTTPS

C. The user's internet connection is slow

D. The website's SSL certificate is expired or invalid

Solution

1. Step 1: Understand HTTPS and SSL certificates

   HTTPS requires a valid SSL certificate to prove the site's identity and encrypt data.

2. Step 2: Identify cause of "Not Secure" message

   If the certificate is expired, invalid, or missing, browsers warn users even if URL starts with https://.

3. Final Answer:

   The website's SSL certificate is expired or invalid -> Option D

4. Quick Check:

   Invalid SSL = Not Secure warning [OK]

Hint: Expired SSL causes 'Not Secure' warning [OK]

Common Mistakes:

• Thinking HTTP URL causes warning when URL is https://
• Blaming slow internet for security warnings
• Assuming old browsers don't support HTTPS

5. You want to ensure your website visitors' data is safe. Which combination of actions best achieves this?

hard

A. Use HTTP only but add a password to your website

B. Use HTTPS but allow users to access HTTP versions optionally

C. Use HTTPS with a valid SSL certificate and redirect all HTTP traffic to HTTPS

D. Use HTTP and rely on browser security warnings

Solution

1. Step 1: Importance of HTTPS and SSL

   HTTPS with a valid SSL certificate encrypts data and verifies website identity.

2. Step 2: Redirecting HTTP to HTTPS

   Redirecting all HTTP traffic to HTTPS ensures users always use the secure version.

3. Final Answer:

   Use HTTPS with a valid SSL certificate and redirect all HTTP traffic to HTTPS -> Option C

4. Quick Check:

   HTTPS + Redirect = Safe data [OK]

Hint: Always redirect HTTP to HTTPS with valid SSL [OK]

Common Mistakes:

• Thinking password alone secures HTTP
• Allowing HTTP access weakens security
• Ignoring SSL certificate validity